ET ATTACK_RESPONSE Linksys Router Returning Device Settings To External Source

7.0.35.0SID: 2018136Rev: 4Enabled1 views
Sourceet/open
Fileemerging-attack_response.rules
CreatedFebruary 14, 2014
UpdatedMarch 13, 2024
Classificationattempted-admin
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET ATTACK_RESPONSE Linksys Router Returning Device Settings To External Source"; flow:established,to_client; file.data; content:"<GetDeviceSettingsResponse>"; content:"<GetDeviceSettingsResult>"; content:"<ModelName>"; reference:url,isc.sans.edu/forums/diary/Linksys+Worm+TheMoon+Summary+What+we+know+so+far/17633; classtype:attempted-admin; sid:2018136; rev:4; metadata:created_at 2014_02_14, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_13;)

References

urlisc.sans.edu/forums/diary/Linksys+Worm+TheMoon+Summary+What+we+know+so+far/17633

Metadata

created at2014_02_14
signature severityInformational
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_03_13

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!