ET MALWARE OSX/Flashback.K/I reporting successful infection

SID: 2014522Rev: 50 viewsHistory

Sourceet/open

CreatedApril 5, 2012

UpdatedApril 21, 2020

Classificationtrojan-activity

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE OSX/Flashback.K/I reporting successful infection"; flow:established,to_server; http.uri; content:"/stat_d/"; endswith; reference:url,f-secure.com/v-descs/trojan-downloader_osx_flashback_k.shtml; reference:url,f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml; reference:url,vms.drweb.com/virus/?i=1816029; classtype:trojan-activity; sid:2014522; rev:5; metadata:created_at 2012_04_05, malware_family OSX_Flashback_K_I, signature_severity Major, updated_at 2020_04_21;)

References

url	f-secure.com/v-descs/trojan-downloader_osx_flashback_k.shtml
url	f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml
url	vms.drweb.com/virus/?i=1816029

Metadata

created at2012_04_05

malware familyOSX_Flashback_K_I

signature severityMajor

updated at2020_04_21

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!