Rule History

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Keylogger Crack by bahman"; flow:established,to_server; http.method; content:"POST"; nocase; http.request_body; content:"&message=|2b|keylogger|2b|Crack|2b|By|2b 25 32 31 25 32 31 25 32 31|...bahman"; nocase; classtype:trojan-activity; sid:2008369; rev:9; metadata:created_at 2010_07_30, confidence Medium, signature_severity Major, updated_at 2024_03_08;)