ET DELETED FAKEAV CryptMEN - 302 Redirect

7.0.35.0SID: 2011920Rev: 5Disabled2 views
Sourceet/open
Fileemerging-deleted.rules
CreatedNovember 11, 2010
UpdatedJuly 26, 2019
Classificationbad-unknown
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET DELETED FAKEAV CryptMEN - 302 Redirect"; flow:established,from_server; content:"Cookie|3a| Hello-friend="; http_raw_header; classtype:bad-unknown; sid:2011920; rev:5; metadata:created_at 2010_11_11, signature_severity Unknown, updated_at 2019_07_26;)

Metadata

created at2010_11_11
signature severityUnknown
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!