Signature Detail
Short Name |
POP3:EXT:DOUBLE-EXTENSION |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
POP3 |
Keywords |
pop3 virus Double Extension |
Release Date |
2007/03/27 |
Update Number |
1213 |
Supported Platforms |
idp-4.0.110090709+, isg-3.4.139899+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
POP3: Double File Extension
This anomaly triggers when it detects an e-mail attachment that contains two file extensions. Attackers or viruses can send e-mail attachments that use two file extensions to disguise the actual file name and trick users into opening a malicious attachment.
References