Rule History

alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"ET MALWARE HackerDefender.HE Root Kit Control Connection Reply"; flow: established,from_server; content:"|d0 84 ec 77 cf ec 60 e9|"; depth:8; reference:url,securityresponse.symantec.com/avcenter/venc/data/backdoor.hackdefender.html; classtype:trojan-activity; sid:2003245; rev:3; metadata:created_at 2010_07_30, confidence Medium, signature_severity Major, updated_at 2019_07_26;)