Rule History

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE 3alupKo/Win32.Socks.n Related Checkin URL (2)"; flow:established,to_server; http.uri; content:"/?&v="; content:"&s="; content:"&cip="; fast_pattern; content:"&lid="; classtype:command-and-control; sid:2008393; rev:4; metadata:created_at 2010_07_30, signature_severity Major, updated_at 2024_03_10;)