Signature Detail
Short Name |
TROJAN:NETDEVIL:NETDEVIL |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
TROJAN |
Keywords |
Spyware RAT NetDevil |
Release Date |
2005/03/29 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TROJAN: NetDevil
This signature detects the runtime behavior of the spyware NetDevil, a remote monitor. After infecting a host, this spyware enables remote attackers to silently control the host (host user is unware). Attackers can also view, add, or delete files, close or delete running applications, and log keystrokes on the host.
Extended Description
NetDevil is a remote administration tool that enables remote attackers to completely control an infected machine without the knowledge of the victim.
References