Signature Detail
Short Name |
TROJAN:SOFACY-CNC |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
TROJAN |
Keywords |
Sofacy Command and Control Traffic |
Release Date |
2015/06/09 |
Update Number |
2503 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TROJAN: Sofacy Command and Control Traffic
This signature detects the Command and Control traffic for the Sofacy trojan. The source IP host is infected and should be removed from the network for analysis.
References