Rule History

alert dns $HOME_NET any -> any any (msg:"ET MOBILE_MALWARE Coper Banking Trojan Related Domain in DNS Lookup"; dns.query; content:"s22231232fdnsjds.top"; nocase; bsize:20; reference:url,cert-pl.translate.goog/posts/2021/12/aktywacja-aplikacji-iko/?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en-US&_x_tr_pto=op; classtype:domain-c2; sid:2034910; rev:2; metadata:attack_target Mobile_Client, created_at 2022_01_13, deployment Perimeter, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2023_06_23;)