Versions (3)
Version DetailsCurrent
Rev: 3 • May 26, 2011, 12:00 PMET MOBILE_MALWARE SymbOS.Flexispy.a Commercial Spying App Sending User Information to Server
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MOBILE_MALWARE SymbOS.Flexispy.a Commercial Spying App Sending User Information to Server"; flow:established,to_server; http.uri; content:"/service"; http.host; content:"mobile.flexispy.com"; startswith; reference:url,www.fortiguard.com/encyclopedia/virus/symbos_flexispy.a!tr.spy.html; classtype:trojan-activity; sid:2012850; rev:3; metadata:created_at 2011_05_26, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_02_06;)
May 26, 2011, 12:00 PM
Feb 6, 2024, 12:00 PM
Sep 21, 2024, 3:00 AM
Oct 8, 2025, 9:38 PM
rules/emerging-mobile_malware.rules