Signature Detail
Short Name |
CHAT:IRC:BOTNET:SDBOT-CMD |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
CHAT |
Keywords |
SDBot UrXBot botnet irc c&c command and control |
Release Date |
2010/02/16 |
Update Number |
1607 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
IRC: SDBot/UrXBot IRC Command Activity
This signature detects chat patterns associated with the SDBot or UrXBot IRC BotNet. Computers infected with malware can use the Internet Relay Chat protocol to "phone home" for instructions by the Botnet controller. It may also be a false positive.
References