SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)

SID: 903209863Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 9, 2026
UpdatedJune 9, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)"; tls_cert_fingerprint; content:"c0:c4:b0:01:cb:d9:2f:88:8d:01:43:65:9e:ac:73:a8:7b:c0:40:d6"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/c0c4b001cbd92f888d0143659eac73a87bc040d6/; sid:903209863; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/c0c4b001cbd92f888d0143659eac73a87bc040d6/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!