Signature Detail
Short Name |
POP3:SUSPICIOUS-HEADER |
|---|---|
Severity |
High |
Recommended |
Yes |
Category |
POP3 |
Keywords |
Suspicious Mail Sender with Randomized Subject Line |
Release Date |
2013/04/01 |
Update Number |
2250 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
POP3: Suspicious Mail Sender with Randomized Header
This signature detects POP3 messages that contains suspicious randomized Header. This kind of behavior is mostly observed when someone is trying to scan and send malicious traffic against a network security device using various traffic generators.