ET POLICY Disposable Email Provider Domain in DNS Lookup (www .yopmail .com)
Sourceet/open
CreatedJuly 19, 2019
UpdatedSeptember 17, 2020
Classificationpolicy-violation
alert dns $HOME_NET any -> any any (msg:"ET POLICY Disposable Email Provider Domain in DNS Lookup (www .yopmail .com)"; dns.query; content:"www.yopmail.com"; nocase; depth:15; endswith; reference:url,blog.trendmicro.com/trendlabs-security-intelligence/spam-campaign-targets-colombian-entities-with-custom-proyecto-rat-email-service-yopmail-for-cc/; classtype:policy-violation; sid:2027733; rev:3; metadata:attack_target Client_Endpoint, created_at 2019_07_19, deployment Perimeter, performance_impact Low, confidence Medium, signature_severity Minor, updated_at 2020_09_17;)
Metadata
attack targetClient_Endpoint
created at2019_07_19
deploymentPerimeter
performance impactLow
confidenceMedium
signature severityMinor
updated at2020_09_17
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!