alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Skyfall fake Skype install link"; flow:established,to_server; http.uri; content:"/video/?n="; depth:10; reference:url,www.windowstechupdates.com/omg-video-httpskypepopvideo-netvideonskype-user-name-virus/; reference:url,securelist.com/blog/incidents/69065/skyfall-meets-skype/; classtype:trojan-activity; sid:2020801; rev:5; metadata:created_at 2015_03_30, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_05_21;)