SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)

SID: 903210036Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 25, 2026
UpdatedJune 25, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)"; tls_cert_fingerprint; content:"01:33:a9:e8:f0:aa:0a:df:ee:0f:c9:28:bb:41:86:6f:b4:4c:23:57"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/0133a9e8f0aa0adfee0fc928bb41866fb44c2357/; sid:903210036; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!