ET MOBILE_MALWARE Android Trojan DroidDream Command and Control Communication

7.0.35.0SID: 2012453Rev: 6Disabled5 views
Sourceet/open
Fileemerging-mobile_malware.rules
CreatedMarch 10, 2011
UpdatedApril 13, 2024
Classificationtrojan-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MOBILE_MALWARE Android Trojan DroidDream Command and Control Communication"; flow:established,to_server; http.method; content:"POST"; http.uri; content:"/GMServer/GMServlet"; nocase; fast_pattern; http.user_agent; content:"Dalvik"; startswith; reference:url,blog.mylookout.com/2011/03/security-alert-malware-found-in-official-android-market-droiddream/; classtype:trojan-activity; sid:2012453; rev:6; metadata:affected_product Android, attack_target Client_Endpoint, created_at 2011_03_10, deployment Perimeter, signature_severity Critical, tag Android, updated_at 2024_04_13;)

Metadata

affected productAndroid
attack targetClient_Endpoint
created at2011_03_10
deploymentPerimeter
signature severityCritical
tagAndroid
updated at2024_04_13

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!