alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET TROJAN Pragma hack Detected Outbound - Likely Infected Source"; flow:established,to_client; content:"Pragma|3a| hack/"; nocase; http_header; classtype:trojan-activity; sid:2010872; rev:6;)

Added 2014-08-28 18:33:49 UTC


alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET TROJAN Pragma hack Detected Outbound - Likely Infected Source"; flow:established,to_client; content:"Pragma|3a| hack/"; nocase; reference:url,doc.emergingthreats.net/2010872; classtype:trojan-activity; sid:2010872; rev:5;)

Added 2011-10-12 19:30:47 UTC


alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET TROJAN Pragma hack Detected Outbound - Likely Infected Source"; flow:established,to_client; content:"Pragma|3a| hack/"; nocase; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2010872; sid:2010872; rev:5;)

Added 2011-09-14 22:43:56 UTC


alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET TROJAN Pragma hack Detected Outbound - Likely Infected Source"; flow:established,to_client; content:"Pragma|3a| hack/"; nocase; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2010872; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Suspicious; sid:2010872; rev:5;)

Added 2011-02-04 17:30:32 UTC


alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET TROJAN Pragma\: hack Detected Outbound - Likely Infected Source"; flow:established,to_client; content:"Pragma\: hack/"; nocase; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2010872; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Suspicious; sid:2010872; rev:3;)

Added 2010-03-08 13:53:45 UTC


alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET TROJAN Pragma\: hack Detected Outbound - Likely Infected Source"; flow:established,to_client; content:"Pragma\: hack/"; nocase; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2010872; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Suspicious; sid:2010872; rev:3;)

Added 2010-03-08 13:53:45 UTC


alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET TROJAN Pragma\: hack Detected Outbound - Likely Infected Source"; flow:established,to_client; content:"Pragma\: hack/"; nocase; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2010872; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Suspicious; sid:2010872; rev:2;)

Added 2010-03-04 14:00:50 UTC


alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET TROJAN Pragma\: hack Detected Outbound - Likely Infected Source"; flow:established,to_client; content:"Pragma\: hack/"; nocase; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2010872; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Suspicious; sid:2010872; rev:2;)

Added 2010-03-04 13:59:09 UTC


Topic revision: r1 - 2014-08-28 - TWikiGuest
 
This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright © Emerging Threats