Rule History

alert dns $HOME_NET any -> any any (msg:"ET MALWARE RouteX CnC Domain (cba4a6e5d3c956548a337c52388473f1 .com) in DNS Lookup"; dns.query; content:"cba4a6e5d3c956548a337c52388473f1.com"; fast_pattern; nocase; bsize:36; reference:url,forkbomb.us/press-releases/2017/09/08/routex-press-release.html; classtype:command-and-control; sid:2024956; rev:5; metadata:affected_product Linux, attack_target Networking_Equipment, created_at 2017_11_06, deployment Internal, performance_impact Moderate, confidence High, signature_severity Major, updated_at 2022_07_22;)