[Snort-sigs] MiniDuke sigs?

Joel Esler jesler at ...435...
Fri Mar 1 16:43:08 EST 2013


On Mar 1, 2013, at 4:05 PM, James Lay <jlay at ...3266...> wrote:

> svchost.jpg?  Really?
> 
> http://blog.fireeye.com/research/2013/02/yaj0-yet-another-java-zero-day-2.html

We are working on coverage for this now.  Not just what you see in the screenshot there, since the CNC is already down.

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20130301/dd7987de/attachment.html>


More information about the Snort-sigs mailing list