SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)

SID: 903209835Rev: 1EnabledDerived4 views
Filesslblacklist_tls_cert.rules
CreatedJune 6, 2026
UpdatedJune 6, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)"; tls_cert_fingerprint; content:"e8:8d:f6:fa:5c:ba:e7:00:2d:55:20:47:f5:25:94:c7:db:e4:6b:aa"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/e88df6fa5cbae7002d552047f52594c7dbe46baa/; sid:903209835; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/e88df6fa5cbae7002d552047f52594c7dbe46baa/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!