TGI HUNT Password Artifact Outbound in FTP

SID: 2610442Rev: 113 views
History
Sourcetgreen/hunting
CreatedMarch 19, 2025
UpdatedMarch 19, 2025
Classificationtrojan-activity
alert ftp-data $HOME_NET any -> $EXTERNAL_NET any (msg:"TGI HUNT Password Artifact Outbound in FTP"; flow:established,to_server; content:"Password"; fast_pattern; pcre:"/\bPassword\b/"; reference:url,github.com/AlessandroZ/LaZagne; classtype:trojan-activity; sid:2610442; rev:1;)

References

urlgithub.com/AlessandroZ/LaZagne

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!