Signature Detail
Short Name |
TROJAN:NIGHT-DRAGON-CC |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
TROJAN |
Keywords |
Malware C&C command and control Night Dragon China Oil trojan botnet W32/Zxshell.A Remosh.A NDragon.A |
Release Date |
2011/02/14 |
Update Number |
1865 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TROJAN: Night Dragon Botnet Command and Control Activity
This signature detects the Command and Control (C&C) behavior of the Night Dragon botnet. The source address is most likely infected with malware and should be investigated.
References
- URL: http://www.computerworld.com/s/article/9209098/_Sloppy_Chinese_hackers_scored_data_theft_coup_with_Night_Dragon_?taxonomyId=17
- URL: http://www.f-secure.com/v-descs/backdoor_w32_zxshell_a.shtml
- URL: http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Backdoor%3aWin32%2fRemosh.A