Rule History

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Ultimate HAckerz Team User-Agent (Made by UltimateHackerzTeam) - Likely Trojan Report"; flow:established,to_server; http.user_agent; content:"Mozilla/4.0 (compatible|3b| MSIE 6.0|3b| Windows NT 5.1|3b| SV1|3b| Made by UltimateHackerzTeam)"; startswith; fast_pattern; classtype:trojan-activity; sid:2010346; rev:8; metadata:created_at 2010_07_30, confidence Medium, signature_severity Major, updated_at 2024_03_04;)