Versions (4)
Version DetailsCurrent
Rev: 6 • Aug 12, 2013, 12:00 PMET MALWARE Win32/Pift DNS TXT CnC Lookup ppidn.net
alert dns $HOME_NET any -> any any (msg:"ET MALWARE Win32/Pift DNS TXT CnC Lookup ppidn.net"; dns.query; dotprefix; content:".ppidn.net"; nocase; endswith; reference:url,kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/23000/PD23873/en_US/McAfee%20Labs%20Threat%20Advisory-W32-Pift.pdf; reference:md5,d3c6af8284276b11c2f693c1195b4735; classtype:command-and-control; sid:2017312; rev:6; metadata:created_at 2013_08_12, malware_family Win32_Pift, signature_severity Major, updated_at 2023_05_15;)
Aug 12, 2013, 12:00 PM
May 15, 2023, 12:00 PM
Aug 12, 2013, 12:00 PM
Sep 13, 2024, 12:00 AM
rules/emerging-malware.rules