ET WEB_CLIENT Malicious 1px iframe related to Mass Wordpress Injections
Sourceet/open
Fileemerging-web_client.rules
CreatedAugust 10, 2011
UpdatedApril 9, 2024
Classificationbad-unknown
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_CLIENT Malicious 1px iframe related to Mass Wordpress Injections"; flow:established,to_client ; file.data; content:"/?go=1|22 20|width=|22|1|22 20|height=|22|1|22|></iframe>"; fast_pattern; content:"<html"; nocase; distance:0; classtype:bad-unknown; sid:2013380; rev:4; metadata:affected_product Wordpress, affected_product Wordpress_Plugins, attack_target Web_Server, created_at 2011_08_10, deployment Datacenter, signature_severity Major, tag Wordpress, updated_at 2024_04_09;)
Metadata
affected productWordpress_Plugins
attack targetWeb_Server
created at2011_08_10
deploymentDatacenter
signature severityMajor
tagWordpress
updated at2024_04_09
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!