SSLBL: Malicious SSL certificate detected (MSDuckStealer C&C)

SID: 903210087Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJuly 7, 2026
UpdatedJuly 7, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (MSDuckStealer C&C)"; tls_cert_fingerprint; content:"bc:a6:27:ea:4b:11:ce:23:58:79:ac:54:bc:f5:ca:21:21:a6:ed:0c"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/bca627ea4b11ce235879ac54bcf5ca2121a6ed0c/; sid:903210087; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/bca627ea4b11ce235879ac54bcf5ca2121a6ed0c/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!