SSLBL: Malicious SSL certificate detected (AmateraStealer C&C)

SID: 903208309Rev: 1EnabledDerived2 views
Filesslblacklist_tls_cert.rules
CreatedOctober 23, 2025
UpdatedOctober 23, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (AmateraStealer C&C)"; tls_cert_fingerprint; content:"21:d6:a6:10:dc:c8:24:cf:1b:91:ed:31:27:4c:eb:14:78:94:30:68"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/21d6a610dcc824cf1b91ed31274ceb1478943068/; sid:903208309; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/21d6a610dcc824cf1b91ed31274ceb1478943068/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!