ET DELETED google.com.br DNS Poisoning redirecting to exploit kit 3

SID: 2013897Rev: 50 views
History
Sourceet/open
CreatedNovember 10, 2011
UpdatedJune 23, 2021
Classificationexploit-kit
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET DELETED google.com.br DNS Poisoning redirecting to exploit kit 3"; flow:established,to_server; http.uri; content:"/FaceBook_Complemento.exe"; reference:url,www.zdnet.com/blog/security/massive-dns-poisoning-attack-in-brazil-serving-exploits-and-malware/9780; reference:url,www.securelist.com/en/blog/208193214/Massive_DNS_poisoning_attacks_in_Brazil; classtype:exploit-kit; sid:2013897; rev:5; metadata:created_at 2011_11_10, signature_severity Unknown, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2021_06_23;)

References

urlwww.zdnet.com/blog/security/massive-dns-poisoning-attack-in-brazil-serving-exploits-and-malware/9780
urlwww.securelist.com/en/blog/208193214/Massive_DNS_poisoning_attacks_in_Brazil

Metadata

created at2011_11_10
signature severityUnknown
tagDescription_Generated_By_Proofpoint_Nexus
updated at2021_06_23

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!