ET WEB_CLIENT Obfuscated Javascript redirecting to badness August 6 2012

7.0.35.0SID: 2015578Rev: 5Disabled2 views
Sourceet/open
Fileemerging-web_client.rules
CreatedAugust 7, 2012
UpdatedApril 8, 2024
Classificationbad-unknown
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_CLIENT Obfuscated Javascript redirecting to badness August 6 2012"; flow:established,to_client; file.data; content:"text/javascript'>var wow="; fast_pattern; content:"document.cookie.indexOf"; within:70; classtype:bad-unknown; sid:2015578; rev:5; metadata:created_at 2012_08_07, signature_severity Major, updated_at 2024_04_08, mitre_tactic_id TA0005, mitre_tactic_name Defense_Evasion, mitre_technique_id T1027, mitre_technique_name Obfuscated_Files_or_Information;)

Metadata

created at2012_08_07
signature severityMajor
updated at2024_04_08
mitre tactic idTA0005
mitre tactic nameDefense_Evasion
mitre technique idT1027
mitre technique nameObfuscated_Files_or_Information

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!