Rule History

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET RETIRED Known Reveton Domain HTTP whatwillber.com"; flow:established,to_server; http.host; content:"whatwillber.com"; fast_pattern; endswith; classtype:trojan-activity; sid:2015874; rev:8; metadata:created_at 2012_11_09, former_category MALWARE, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_12_04;)