ET MOBILE_MALWARE Android Trojan DroidDream Command and Control Communication

SID: 2012453Rev: 50 views
Sourceet/open
CreatedMarch 10, 2011
UpdatedOctober 19, 2020
Classificationtrojan-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MOBILE_MALWARE Android Trojan DroidDream Command and Control Communication"; flow:established,to_server; http.method; content:"POST"; http.uri; content:"/GMServer/GMServlet"; nocase; fast_pattern; http.user_agent; content:"Dalvik"; depth:6; reference:url,blog.mylookout.com/2011/03/security-alert-malware-found-in-official-android-market-droiddream/; classtype:trojan-activity; sid:2012453; rev:5; metadata:affected_product Android, attack_target Client_Endpoint, created_at 2011_03_10, deployment Perimeter, signature_severity Critical, tag Android, updated_at 2020_10_19;)

Metadata

affected productAndroid
attack targetClient_Endpoint
created at2011_03_10
deploymentPerimeter
signature severityCritical
tagAndroid
updated at2020_10_19

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!