Rule History

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Backdoor.Win32.Vertexbot.A User-Agent (VERTEXNET)"; flow:to_server,established; http.user_agent; content:"VERTEXNET"; depth:9; reference:url,www.symantec.com/business/security_response/writeup.jsp?docid=2011-032315-2902-99&tabid=2; classtype:trojan-activity; sid:2012740; rev:5; metadata:created_at 2011_03_31, confidence High, signature_severity Major, updated_at 2020_10_13;)