Signature Detail
Short Name |
POP3:EXT:DOT-ISP |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
POP3 |
Keywords |
.isp e-mail attachment |
Release Date |
2004/12/01 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
POP3: .ISP File Attachment
This signature detects e-mail attachments that have the extension .isp and were received through POP3. Because .ISPs (Internet Communication Settings) files contain configuration parameters, this can indicate an incoming e-mail virus. Attackers can include malicious configurations, tricking users into executing the file and infecting the system.
Extended Description
This signature detects .isp files arriving via email attachments. These .isp files may be exploited by viruses and worms to compromise a target system.
References