ET ADWARE_PUP Fake Wget User-Agent (wget 3.0) - Likely Hostile - Suricata Rule 2007961 (et/open)

ET ADWARE_PUP Fake Wget User-Agent (wget 3.0) - Likely Hostile

7.0.3 5.0SID: 2007961Rev: 13Enabled2 views

Fileemerging-adware_pup.rules

CreatedJuly 30, 2010

UpdatedSeptember 17, 2020

Classificationpup-activity

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET ADWARE_PUP Fake Wget User-Agent (wget 3.0) - Likely Hostile"; flow:established,to_server; http.user_agent; content:"wget 3.0"; depth:8; endswith; classtype:pup-activity; sid:2007961; rev:13; metadata:created_at 2010_07_30, confidence Medium, signature_severity Minor, updated_at 2020_09_17;)

Metadata

created at2010_07_30

confidenceMedium

signature severityMinor

updated at2020_09_17

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!