Signature Detail
Short Name |
TROJAN:DAGGER:CLIENT-CONNECT |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
TROJAN |
Keywords |
dagger backdoor back orifce trojan |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TROJAN: Dagger Client Connection
This signature detects attempts to connect to port 2589. This can indicate that an attacker is using the Trojan Dagger to remotely control the system.
Extended Description
Dagger is a remote adminstration tool. It enables remote attackers to control an infected machine.
References