Signature Detail
Short Name |
TROJAN:SATANS-BD:SERVER-RES |
|---|---|
Severity |
Critical |
Recommended |
No |
Recommended Action |
Drop |
Category |
TROJAN |
Keywords |
Satan's Backdoor |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TROJAN: Satan's Backdoor Server Response
This signature detects TCP packets sent from local server port 666 to remote port 1024. This can indicate the server is responding to an attacker to confirm connection to the Trojan Satan's Backdoor. Satan's Backdoor, a remote administration Trojan, allows attackers to access data and gain control over some functions on remote Microsoft Windows systems.
Extended Description
None
References