SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)

SID: 903209815Rev: 1EnabledDerived4 views
Filesslblacklist_tls_cert.rules
CreatedJune 4, 2026
UpdatedJune 4, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)"; tls_cert_fingerprint; content:"ca:ff:4a:df:a4:b8:2c:53:6f:b4:87:57:6f:22:3a:5e:e6:4d:41:94"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/caff4adfa4b82c536fb487576f223a5ee64d4194/; sid:903209815; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/caff4adfa4b82c536fb487576f223a5ee64d4194/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!