ET ADWARE_PUP Virusblast.com Fake AV/Anti-Spyware User-Agent (ad-protect)
Sourceet/open
CreatedJuly 30, 2010
UpdatedOctober 17, 2020
Classificationpup-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET ADWARE_PUP Virusblast.com Fake AV/Anti-Spyware User-Agent (ad-protect)"; flow:to_server,established; http.user_agent; content:"ad-protect"; nocase; depth:10; reference:url,spywarewarrior.com/rogue_anti-spyware.htm; reference:url,www.virusblast.com; classtype:pup-activity; sid:2003476; rev:12; metadata:attack_target Client_Endpoint, created_at 2010_07_30, deployment Perimeter, confidence High, signature_severity Minor, tag Spyware_User_Agent, updated_at 2020_10_17;)
References
Metadata
attack targetClient_Endpoint
created at2010_07_30
deploymentPerimeter
confidenceHigh
signature severityMinor
tagSpyware_User_Agent
updated at2020_10_17
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!