alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET CURRENT_EVENTS Fake 404 With Hidden Login Form"; flow:established,from_server; content:"200"; http_stat_code; file_data; content:""; fast_pattern; depth:28; content:"background-color|3a 23|fff|3b|"; distance:0; content:"

"; distance:0; content:"input type=password"; distance:0; within:50; classtype:trojan-activity; sid:2025872; rev:1; metadata:attack_target Client_and_Server, created_at 2018_07_19, deployment Perimeter, former_category CURRENT_EVENTS, performance_impact Low, signature_severity Major, updated_at 2020_11_18;)

Added 2020-11-18 18:26:32 UTC

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET CURRENT_EVENTS Fake 404 With Hidden Login Form"; flow:established,from_server; content:"200"; http_stat_code; file_data; content:""; fast_pattern; depth:28; content:"background-color|3a 23|fff|3b|"; distance:0; content:"

"; distance:0; content:"input type=password"; distance:0; within:50; classtype:trojan-activity; sid:2025872; rev:1; metadata:attack_target Client_and_Server, created_at 2018_07_19, deployment Perimeter, former_category CURRENT_EVENTS, performance_impact Low, signature_severity Major, updated_at 2020_08_19;)

Added 2020-08-19 18:14:31 UTC

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET CURRENT_EVENTS Fake 404 With Hidden Login Form"; flow:established,from_server; content:"200"; http_stat_code; file_data; content:""; fast_pattern; depth:28; content:"background-color|3a 23|fff|3b|"; distance:0; content:""; distance:0; content:"input type=password"; distance:0; within:50; classtype:trojan-activity; sid:2025872; rev:1; metadata:attack_target Client_and_Server, created_at 2018_07_19, deployment Perimeter, former_category CURRENT_EVENTS, performance_impact Low, signature_severity Major, updated_at 2018_07_19;)

Added 2020-08-05 19:14:58 UTC

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET CURRENT_EVENTS Fake 404 With Hidden Login Form"; flow:established,from_server; content:"200"; http_stat_code; file_data; content:""; fast_pattern; depth:28; content:"background-color|3a 23|fff|3b|"; distance:0; content:""; distance:0; content:"input type=password"; distance:0; within:50; metadata: former_category CURRENT_EVENTS; classtype:trojan-activity; sid:2025872; rev:1; metadata:attack_target Client_and_Server, deployment Perimeter, signature_severity Major, created_at 2018_07_19, performance_impact Low, updated_at 2018_07_19;)

Added 2018-09-13 19:54:59 UTC

Added 2018-09-13 18:02:20 UTC

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET CURRENT_EVENTS Fake 404 With Hidden Login Form"; flow:established,from_server; content:"200"; http_stat_code; file_data; content:""; fast_pattern; depth:28; content:"background-color|3a 23|fff|3b|"; distance:0; content:""; distance:0; content:"input type=password"; distance:0; within:50; metadata: former_category CURRENT_EVENTS; classtype:trojan-activity; sid:2025872; rev:1; metadata:attack_target Client_and_Server, deployment Perimeter, signature_severity Major, created_at 2018_07_19, performance_impact Low, updated_at 2018_07_19;)

Added 2018-07-20 16:33:18 UTC