Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:STC:ACTIVEX:CLSID-OBFUS |
|---|---|
Severity |
Minor |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Microsoft ActiveX Control ClassID Obfuscation |
Release Date |
2012/06/07 |
Update Number |
2148 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Microsoft ActiveX Control ClassID Obfuscation
This signature detects attempts to obfuscate the ClassID of an ActiveX control. Such activity is currently being used in the wild by malware on popular websites. This could also trigger on marketing websites that also obfuscate their JavaScript. Care should be taken during research of sites that trigger on this signature.