Rule History

alert dns $HOME_NET any -> any any (msg:"ET MALWARE DNS Query Possible Zbot Infection Query for networksecurityx.hopto.org"; dns.query; content:"networksecurityx.hopto.org"; endswith; reference:md5,37782108e8b7f331a6fdeabef9c8a774; reference:md5,10fa9c6c27e6eb512d12dee8181e182f; classtype:trojan-activity; sid:2018008; rev:7; metadata:created_at 2014_01_24, deprecation_reason Relevance, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_04_10, reviewed_at 2024_04_10;)