alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET EXPLOIT_KIT Sutra TDS /simmetry"; flow:to_server,established; http.uri; content:"/simmetry?"; fast_pattern; reference:url,blog.sucuri.net/2012/08/very-good-malware-redirection.html; classtype:exploit-kit; sid:2015593; rev:4; metadata:created_at 2012_08_09, signature_severity Major, tag TDS, updated_at 2020_09_17;)