#alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN RevProxy? - ClickFraud? - MIDUIDEND"; flow:established,to_server; dsize:46; content:"MID"; depth:3; content:"UID"; distance:32; within:3; content:"END"; distance:5; within:3; classtype:trojan-activity; sid:2016293; rev:2; metadata:created_at 2013_01_26, updated_at 2013_01_26;)

Added 2020-11-20 19:36:40 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN RevProxy? - ClickFraud? - MIDUIDEND"; flow:established,to_server; dsize:46; content:"MID"; depth:3; content:"UID"; distance:32; within:3; content:"END"; distance:5; within:3; classtype:trojan-activity; sid:2016293; rev:2; metadata:created_at 2013_01_26, updated_at 2013_01_26;)

Added 2018-09-13 19:46:15 UTC

Added 2018-09-13 17:57:15 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN RevProxy? - ClickFraud? - MIDUIDEND"; flow:established,to_server; dsize:46; content:"MID"; depth:3; content:"UID"; distance:32; within:3; content:"END"; distance:5; within:3; classtype:trojan-activity; sid:2016293; rev:2; metadata:created_at 2013_01_26, updated_at 2013_01_26;)

Added 2017-08-07 21:09:59 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN RevProxy? - ClickFraud? - MIDUIDEND"; flow:established,to_server; dsize:46; content:"MID"; depth:3; content:"UID"; distance:32; within:3; content:"END"; distance:5; within:3; classtype:trojan-activity; sid:2016293; rev:2;)

Added 2013-01-25 22:57:54 UTC