Signature Detail
Short Name |
TROJAN:BACKDOOR:GHOSTNET-CNC |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
TROJAN |
Keywords |
Backdoor.GhostNet Command and Control Traffic |
Release Date |
2012/12/17 |
Update Number |
2211 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TROJAN: Backdoor.GhostNet Command and Control Traffic
This signature detects the Command and Control traffic for the Backdoor.GhostNet trojan. The source IP host is infected and should be removed from the network for analysis.
References