Versions (3)
Version DetailsCurrent
Rev: 5 • Sep 29, 2010, 12:00 PMET DELETED MALVERTISING redirect to exploit kit (unoeuro server)
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET DELETED MALVERTISING redirect to exploit kit (unoeuro server)"; flow:established,to_client; content:"=|5b 22 5c|x68|5c|x74|5c|x74|5c|x70|5c|x3A|5c|x2F|5c|x2F|5c|"; content:"|0d 0a|Serverxi|3a| Apache/Unoeuro (Unix) - Secured|0d 0a|"; classtype:exploit-kit; sid:2011479; rev:5; metadata:created_at 2010_09_29, signature_severity Unknown, updated_at 2021_06_23;)
Sep 29, 2010, 12:00 PM
Jun 23, 2021, 12:00 PM
Sep 21, 2024, 3:00 AM
May 30, 2025, 12:04 AM
rules/emerging-deleted.rules