ET MALWARE OpenSSH in ICMP Payload - Possible Covert Channel
Sourceet/open
CreatedJune 8, 2017
UpdatedJuly 26, 2019
Classificationtrojan-activity
alert icmp any any -> any any (msg:"ET MALWARE OpenSSH in ICMP Payload - Possible Covert Channel"; itype:8; icode:0; content:"openssh"; nocase; classtype:trojan-activity; sid:2024366; rev:1; metadata:affected_product Any, attack_target Client_Endpoint, created_at 2017_06_08, deployment Perimeter, performance_impact Moderate, confidence Medium, signature_severity Major, updated_at 2019_07_26;)
Metadata
affected productAny
attack targetClient_Endpoint
created at2017_06_08
deploymentPerimeter
performance impactModerate
confidenceMedium
signature severityMajor
updated at2019_07_26
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!