Signature Detail
Short Name |
SMTP:EXT:DOT-ZIP |
|---|---|
Severity |
Info |
Recommended |
No |
Category |
SMTP |
Keywords |
.zip |
Release Date |
2004/06/02 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SMTP: .ZIP
This signature detects e-mail attachments with the extension .zip sent using SMTP. This can indicate an incoming e-mail virus. Zip files are compressed files that can contain one or more executables. Attackers can compress malicious executables within a .zip file, tricking unsuspecting users into executing the file and infecting the system. Because Zip files are frequently used for non-malicious purposes, this signature can generate false positives. As a general network security precaution, ensure that all users are aware of the dangers of sending and receiving binary files in e-mail attachments.
Extended Description
None