Versions (5)
Version DetailsCurrent
Rev: 13 • Jul 30, 2010, 12:00 PMET HUNTING Suspicious Mozilla User-Agent typo (MOzilla/4.0)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET HUNTING Suspicious Mozilla User-Agent typo (MOzilla/4.0)"; flow:established,to_server; http.user_agent; content:"M|4f|zilla/"; startswith; classtype:trojan-activity; sid:2003513; rev:13; metadata:created_at 2010_07_30, confidence Medium, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_01;)
Jul 30, 2010, 12:00 PM
Mar 1, 2024, 12:00 PM
Sep 21, 2024, 3:00 AM
Oct 1, 2025, 9:34 PM
rules/emerging-hunting.rules