🐾 - 👁 Suspicious DNS Request 🌐 -trust.org > Possible 🏴‍☠️ FIN7 🇷🇺 Group

SID: 3309688Rev: 30 views
Sourcepawpatrules
CreatedOctober 26, 2021
UpdatedJanuary 30, 2023
Classificationtrojan-activity
alert dns any any -> any any (msg:"🐾 - 👁 Suspicious DNS Request 🌐 -trust.org > Possible 🏴‍☠️ FIN7 🇷🇺 Group"; flow:to_server, stateless; dns_query; content:"-trust.org"; nocase; reference:url,https://securelist.com/fin7-5-the-infamous-cybercrime-rig-fin7-continues-its-activities/90703/; reference:url,https://malpedia.caad.fkie.fraunhofer.de/actor/fin7; metadata:created_at 2021_10_26, updated_at 2023_01_30; sid:3309688; rev:3; classtype:trojan-activity;)

References

urlhttps://securelist.com/fin7-5-the-infamous-cybercrime-rig-fin7-continues-its-activities/90703/
urlhttps://malpedia.caad.fkie.fraunhofer.de/actor/fin7

Metadata

created at2021_10_26
updated at2023_01_30

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!