TGI HUNT Possible Excel Template Injection

SID: 2610600Rev: 117 views
History
Sourcetgreen/hunting
CreatedMarch 19, 2025
UpdatedMarch 19, 2025
Classificationtrojan-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"TGI HUNT Possible Excel Template Injection"; flow:to_server,established; content:".dotm?raw=true"; http_uri; fast_pattern; reference:url,twitter.com/jstrosch/status/1267471477458288642; classtype:trojan-activity; sid:2610600; rev:1;)

References

urltwitter.com/jstrosch/status/1267471477458288642

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!