Signature Detail
Short Name |
TROJAN:DAGGER:SERVER-RES |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
TROJAN |
Keywords |
TROJAN |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TROJAN: Dagger Server Response
This signature detects response sent from local TCP port 2589. This can indicate that an attacker is using the Trojan Dagger to remotely control the system.
Extended Description
Dagger is a remote administration tool. It enables remote attackers to control an infected machine.
References