alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET CURRENT_EVENTS Domain Related to Phishing GDI Exploits MS08-021 igloofamily.com"; flow:established,to_server; content:"Host\: "; content:"igloofamily.com"; within:50; nocase; classtype:misc-attack; reference:url,isc.sans.org/diary.html?storyid=4274; sid:2008137; rev:1;)

Added 2008-04-21 00:05:49 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET CURRENT_EVENTS Domain Related to Phishing GDI Exploits MS08-021 igloofamily.com"; flow:established,to_server; content:"Host\: "; content:"igloofamily.com"; within:50; nocase; classtype:misc-attack; reference:url,isc.sans.org/diary.html?storyid=4274; sid:2008137; rev:1;)

Added 2008-04-20 23:55:02 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET CURRENT_EVENTS Domain Related to Phishing GDI Exploits MS08-021 igloofamily.com"; flow:established,to_server; content:"Host\: "; content:"igloofamily.com"; within:50; nocase; classtype:misc-attack; reference:url,isc.sans.org/diary.html?storyid=4274; sid:2008137; rev:1;)

Added 2008-04-16 14:04:49 UTC