SSLBL: Malicious SSL certificate detected (ACRStealer C&C)

SID: 903208500Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedDecember 3, 2025
UpdatedDecember 3, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ACRStealer C&C)"; tls_cert_fingerprint; content:"e4:17:38:be:20:06:0b:35:0d:6e:d9:6c:bc:28:4a:71:2f:6b:e1:a9"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/e41738be20060b350d6ed96cbc284a712f6be1a9/; sid:903208500; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/e41738be20060b350d6ed96cbc284a712f6be1a9/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!