[Snort-sigs] jRAT

James Lay jlay at ...3266...
Wed Jul 10 07:01:08 EDT 2013


On Jul 9, 2013, at 8:12 PM, Ned Moran <ned at ...3764...> wrote:

> is this what you are referring to https://jrat.pro/ ?
> 
> On 7/9/13 10:00 PM, James Lay wrote:
>> Anyone see info on this?  Trying to find samples or screenshots of c&c traffic or SOMETHING to go on.  Thanks all.
>> 
>> James

Yea….Java Remote Access Tool…seeing references to it the last couple days, but nothing actually showing it in use.

James





More information about the Snort-sigs mailing list