#alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN RevProxy? - ClickFraud? - MIDUIDEND"; flow:established,to_server; dsize:46; content:"MID"; depth:3; content:"UID"; distance:32; within:3; content:"END"; distance:5; within:3; classtype:trojan-activity; sid:2016293; rev:2; metadata:created_at 2013_01_26, updated_at 2013_01_26;)

Added 2020-11-20 19:36:40 UTC


alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN RevProxy? - ClickFraud? - MIDUIDEND"; flow:established,to_server; dsize:46; content:"MID"; depth:3; content:"UID"; distance:32; within:3; content:"END"; distance:5; within:3; classtype:trojan-activity; sid:2016293; rev:2; metadata:created_at 2013_01_26, updated_at 2013_01_26;)

Added 2018-09-13 19:46:15 UTC


Added 2018-09-13 17:57:15 UTC


alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN RevProxy? - ClickFraud? - MIDUIDEND"; flow:established,to_server; dsize:46; content:"MID"; depth:3; content:"UID"; distance:32; within:3; content:"END"; distance:5; within:3; classtype:trojan-activity; sid:2016293; rev:2; metadata:created_at 2013_01_26, updated_at 2013_01_26;)

Added 2017-08-07 21:09:59 UTC


alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN RevProxy? - ClickFraud? - MIDUIDEND"; flow:established,to_server; dsize:46; content:"MID"; depth:3; content:"UID"; distance:32; within:3; content:"END"; distance:5; within:3; classtype:trojan-activity; sid:2016293; rev:2;)

Added 2013-01-25 22:57:54 UTC



This topic: Main > 2016293
Topic revision: r1 - 2020-11-21 - TWikiGuest
 
This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright © Emerging Threats