Short Name |
CHAT:IRC:BOTNET:W3TW0RK-RCE |
---|---|
Severity |
Major |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
CHAT |
Keywords |
w3tw0rk Or Pitbul IRC Bot Remote Code Execution |
Release Date |
2016/08/18 |
Update Number |
2769 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
This signature detects chat patterns associated with the w3tw0rk or Pitbul IRC BotNet. Computers infected with malware can use the Internet Relay Chat protocol to "phone home" for instructions by the Botnet controller. It may also be a false positive.