Versions (3)
Version DetailsCurrent
Rev: 6 • Jan 31, 2012, 12:00 PMET DELETED Styx Exploit Kit Landing
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET DELETED Styx Exploit Kit Landing"; flow:established,to_server; urilen:7; content:"/i.html"; http_uri; depth:7; fast_pattern; content:"Referer|3a| "; http_header; content:!"|0d 0a|"; http_header; within:100; content:"|0d 0a|"; distance:0; http_header; classtype:exploit-kit; sid:2014171; rev:6; metadata:created_at 2012_01_31, signature_severity Unknown, updated_at 2021_06_23;)
Jan 31, 2012, 12:00 PM
Jun 23, 2021, 12:00 PM
Sep 21, 2024, 3:00 AM
May 30, 2025, 12:04 AM
rules/emerging-deleted.rules