SSLBL: Malicious SSL certificate detected (ACRStealer C&C)

SID: 903209981Rev: 1EnabledDerived3 views
Filesslblacklist_tls_cert.rules
CreatedJune 22, 2026
UpdatedJune 22, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ACRStealer C&C)"; tls_cert_fingerprint; content:"8c:cf:76:e1:3a:2b:6b:a7:3f:fa:36:fa:1b:73:f6:bc:6f:d0:6f:56"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/8ccf76e13a2b6ba73ffa36fa1b73f6bc6fd06f56/; sid:903209981; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/8ccf76e13a2b6ba73ffa36fa1b73f6bc6fd06f56/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!