SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)

SID: 903209961Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 18, 2026
UpdatedJune 18, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)"; tls_cert_fingerprint; content:"07:0a:d9:d3:59:15:1a:2d:e5:af:7c:d4:12:95:75:8b:f1:f4:22:7a"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/070ad9d359151a2de5af7cd41295758bf1f4227a/; sid:903209961; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/070ad9d359151a2de5af7cd41295758bf1f4227a/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!