Rule History

alert dns $HOME_NET any -> any any (msg:"ET RETIRED DNS Query Known Reveton Domain whatwillber.com"; dns.query; content:"whatwillber.com"; depth:15; nocase; endswith; classtype:bad-unknown; sid:2015875; rev:10; metadata:created_at 2012_11_09, former_category MALWARE, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_12_04;)