Versions (3)
Version DetailsCurrent
Rev: 2 • Dec 28, 2012, 12:00 PMET WEB_CLIENT Drupal Mass Injection Campaign Outbound
alert http $HTTP_SERVERS any -> $EXTERNAL_NET any (msg:"ET WEB_CLIENT Drupal Mass Injection Campaign Outbound"; flow:established,from_server; file_data; content:"if (i5463 == null) { var i5463 = 1|3b|"; classtype:bad-unknown; sid:2016099; rev:2; metadata:created_at 2012_12_28, signature_severity Major, updated_at 2019_07_26;)Dec 28, 2012, 12:00 PM
Jul 26, 2019, 12:00 PM
Sep 21, 2024, 3:00 AM
May 30, 2025, 12:04 AM
rules/emerging-web_client.rules