Signature Detail
Short Name |
POP3:EXT:DOT-LNK |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
POP3 |
Keywords |
.lnk e-mail attachment |
Release Date |
2004/07/28 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
POP3: .LNK
This signature detects e-mail attachments that have the extension .lnk and were received through POP3. Because .LNKs (Windows link) files can point to any program, this can indicate an incoming e-mail virus. Attackers can create a link pointing to a dangerous program, tricking users into executing the link and affecting the system.
Extended Description
The impact on the target system is dependent on the instructions contained in the malicious .lnk file.
References