ET HUNTING Possible Covid19 Themed Email Spam Outbound M2
Sourceet/open
Fileemerging-hunting.rules
CreatedMarch 31, 2020
UpdatedMarch 7, 2024
Classificationbad-unknown
alert smtp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET HUNTING Possible Covid19 Themed Email Spam Outbound M2"; flow:established,to_server ; content:"coronavirus"; nocase; fast_pattern; threshold:type threshold, count 5, seconds 120, track by_src ; classtype:bad-unknown; sid:2029777; rev:3; metadata:created_at 2020_03_31, confidence Medium, signature_severity Minor, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_07;)
Metadata
created at2020_03_31
confidenceMedium
signature severityMinor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_03_07
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!