alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE TROJAN Prg Trojan HTTP POST"; flow:established,to_server; content:"POST "; depth:5; uricontent:"/s.php?2="; uricontent:"&n="; uricontent:"&v="; uricontent:"&sp="; uricontent:"&lcp="; reference:url,ip.securescience.net/advisories/pubMalwareCaseStudy.pdf; classtype:trojan-activity; sid:2007688; rev:2;)

Added 2007-12-18 00:01:37 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE TROJAN Prg Trojan HTTP POST"; flow:established,to_server; content:"POST "; depth:5; uricontent:"/s.php?2="; uricontent:"&n="; uricontent:"&v="; uricontent:"&sp="; uricontent:"&lcp="; reference:url,ip.securescience.net/advisories/pubMalwareCaseStudy.pdf; classtype:trojan-activity; sid:2007688; rev:2;)

Added 2007-12-18 00:01:37 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE TROJAN Prg Trojan HTTP POST"; flow:established,to_server; content:"POST "; depth:5; uricontent:"/s.php?2="; uricontent:"&n="; uricontent:"&v="; uricontent:"&sp="; uricontent:"&lcp="; classtype:trojan-activity; sid:2007688; rev:1;)

Added 2007-11-11 02:18:08 UTC