ET MALWARE ETag HTTP Header Observed at CNCERT Sinkhole
Sourceet/open
CreatedJune 7, 2021
UpdatedJune 7, 2021
Classificationbad-unknown
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET MALWARE ETag HTTP Header Observed at CNCERT Sinkhole"; flow:established,to_client; http.header; content:"ETag|3a 20 22|2b1-55fb5d562c37c|22|"; classtype:bad-unknown; sid:2033104; rev:1; metadata:attack_target Client_Endpoint, created_at 2021_06_07, deployment Perimeter, confidence High, signature_severity Minor, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2021_06_07;)
Metadata
attack targetClient_Endpoint
created at2021_06_07
deploymentPerimeter
confidenceHigh
signature severityMinor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2021_06_07
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!