ET WEB_CLIENT Known Injected Credit Card Fraud Malvertisement Script

7.0.35.0SID: 2013244Rev: 3Disabled1 views
Sourceet/open
Fileemerging-web_client.rules
CreatedJuly 11, 2011
UpdatedApril 9, 2024
Classificationmisc-activity
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_CLIENT Known Injected Credit Card Fraud Malvertisement Script"; flow:established,to_client; file.data; content:"|3C|script|3E|ba|28 27|Windows.class|27 2C 27|Windows.jar|27 29 3B 3C 2F|script|3E|"; fast_pattern; nocase; reference:url,blogs.paretologic.com/malwarediaries/index.php/2011/07/06/stolen-credit-cards-site-injected-with-malware/; classtype:misc-activity; sid:2013244; rev:3; metadata:created_at 2011_07_11, signature_severity Unknown, updated_at 2024_04_09;)

References

urlblogs.paretologic.com/malwarediaries/index.php/2011/07/06/stolen-credit-cards-site-injected-with-malware/

Metadata

created at2011_07_11
signature severityUnknown
updated at2024_04_09

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!