ET CURRENT_EVENTS DNS Query for Known Hostile Domain (gooqlepics .com)
Sourceet/open
CreatedJuly 27, 2011
UpdatedJuly 15, 2022
Classificationbad-unknown
alert dns $HOME_NET any -> any any (msg:"ET CURRENT_EVENTS DNS Query for Known Hostile Domain (gooqlepics .com)"; dns.query; content:".com.ru"; fast_pattern; nocase; bsize:14; reference:url,blog.armorize.com/2011/07/willysycom-mass-injection-ongoing.html; classtype:bad-unknown; sid:2013328; rev:5; metadata:created_at 2011_07_27, confidence Medium, signature_severity Unknown, updated_at 2022_07_15;)
Metadata
created at2011_07_27
confidenceMedium
signature severityUnknown
updated at2022_07_15
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!