SSLBL: Malicious SSL certificate detected (ACRStealer C&C)

SID: 903209419Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedApril 1, 2026
UpdatedApril 1, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ACRStealer C&C)"; tls_cert_fingerprint; content:"22:57:a9:37:ef:96:cd:48:21:51:94:04:b0:db:02:a2:f3:b5:06:fa"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/2257a937ef96cd4821519404b0db02a2f3b506fa/; sid:903209419; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/2257a937ef96cd4821519404b0db02a2f3b506fa/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!