Rule History

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET SCAN External Host Probing for ChromeCast Devices"; flow:established,to_server; urilen:18; http.method; content:"GET"; http.uri; content:"/setup/eureka_info"; fast_pattern; reference:url,www.theverge.com/2019/1/2/18165386/pewdiepie-chromecast-hack-tseries-google-chromecast-smart-tv; classtype:attempted-recon; sid:2026758; rev:5; metadata:attack_target IoT, created_at 2019_01_04, deployment Perimeter, performance_impact Low, confidence Medium, signature_severity Informational, tag Enumeration, updated_at 2023_04_20;)