Versions (6)
Version DetailsCurrent
Rev: 1 • Oct 9, 2025, 2:49 PMMINER [PTsecurity] RustMiner
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"MINER [PTsecurity] RustMiner"; flow:established, to_server; content:"GET"; http_method; content:"Cache-Control: no-cache|0d 0a|Connection: Keep-Alive|0d 0a|Pragma: no-cache"; http_header; content:"Accept: */*, ???@, ??????????????"; http_header; distance:0; content:!"Referer"; http_header; threshold:type limit, track by_src, seconds 120, count 1; reference:url, https://tria.ge/240111-fj6bzaehfl/behavioral2; reference:url, rules.ptsecurity.com; classtype:trojan-activity; sid:10010726; rev:1;)
Oct 9, 2025, 2:49 PM
Oct 9, 2025, 2:49 PM
Oct 16, 2025, 10:34 AM
Oct 16, 2025, 10:34 AM
rules/ptopen-malware.rules