🐾 - 🚨 Possible RapperBot 👲 SSH bruteforcing attempt (SSH-2.0-HELLOWORLD banner seen)

SID: 3300705Rev: 11 views
Sourcepawpatrules
CreatedAugust 5, 2022
UpdatedAugust 5, 2022
Classificationtrojan-activity
alert ssh any any -> any any (msg:"🐾 - 🚨 Possible RapperBot 👲 SSH bruteforcing attempt (SSH-2.0-HELLOWORLD banner seen)"; flow:to_server, stateless; ssh.software; content:"SSH-2.0-HELLOWORLD"; reference:url,https://www.fortinet.com/blog/threat-research/rapperbot-malware-discovery; metadata:created_at 2022_08_05, updated_at 2022_08_05; sid:3300705; rev:1; classtype:trojan-activity;)

References

urlhttps://www.fortinet.com/blog/threat-research/rapperbot-malware-discovery

Metadata

created at2022_08_05
updated at2022_08_05

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!