SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)

SID: 903208651Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedDecember 25, 2025
UpdatedDecember 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)"; tls_cert_fingerprint; content:"8e:22:e9:96:d0:21:5c:4e:2c:b7:3e:56:21:cb:9d:e9:04:b8:61:cf"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/8e22e996d0215c4e2cb73e5621cb9de904b861cf/; sid:903208651; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/8e22e996d0215c4e2cb73e5621cb9de904b861cf/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!