SSLBL: Malicious SSL certificate detected (ACRStealer C&C)

SID: 903210112Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJuly 9, 2026
UpdatedJuly 9, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ACRStealer C&C)"; tls_cert_fingerprint; content:"04:92:09:f7:8a:ca:1e:67:15:a7:06:e0:0c:56:28:31:34:01:01:35"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/049209f78aca1e6715a706e00c56283134010135/; sid:903210112; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/049209f78aca1e6715a706e00c56283134010135/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!