Signature Detail
Short Name |
TROJAN:CAPFIRE4-CNC |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
TROJAN |
Keywords |
Capfire4 Command and Control Traffic |
Release Date |
2012/08/15 |
Update Number |
2173 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TROJAN: Capfire4 Command and Control Traffic
This signature detects the Command and Control traffic for the Capfire4 trojan. The source IP host is infected and should be removed from the network for analysis.
References