ET MOBILE_MALWARE DNS Query for gongfu-android.com DroidKungFu CnC Server

7.0.35.0SID: 2013023Rev: 7Enabled1 views
Sourceet/open
Fileemerging-mobile_malware.rules
CreatedJune 13, 2011
UpdatedApril 13, 2024
Classificationcommand-and-control
alert dns $HOME_NET any -> any any (msg:"ET MOBILE_MALWARE DNS Query for gongfu-android.com DroidKungFu CnC Server"; dns.query; content:"gongfu-android.com"; startswith; endswith; reference:url,extraexploit.blogspot.com/2011/06/droidkungfu-just-some-piece-of-code.html; reference:url,www.redmondpie.com/droidkungfu-new-hard-to-detect-android-malware-threat-on-the-loose-steals-user-data-and-more/; reference:url,www.fortiguard.com/encyclopedia/virus/android_droidkungfu.a!tr.html; classtype:command-and-control; sid:2013023; rev:7; metadata:affected_product Android, attack_target Client_Endpoint, created_at 2011_06_13, deployment Perimeter, confidence Medium, signature_severity Critical, tag Android, updated_at 2024_04_13;)

References

urlextraexploit.blogspot.com/2011/06/droidkungfu-just-some-piece-of-code.html
urlwww.redmondpie.com/droidkungfu-new-hard-to-detect-android-malware-threat-on-the-loose-steals-user-data-and-more/
urlwww.fortiguard.com/encyclopedia/virus/android_droidkungfu.a!tr.html

Metadata

affected productAndroid
attack targetClient_Endpoint
created at2011_06_13
deploymentPerimeter
confidenceMedium
signature severityCritical
tagAndroid
updated at2024_04_13

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!