Signature Detail
Short Name |
VIRUS:SMTP:ASPROX |
|---|---|
Severity |
High |
Recommended |
Yes |
Category |
VIRUS |
Keywords |
ASProx Kuluoz DoFoil Zortob malware virus |
Release Date |
2014/08/25 |
Update Number |
2411 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
VIRUS: Possible ASProx Botnet Email Content
This signature detects potential ASProx (aka Kuluoz/DoFoil/Zortob) infection attempts being sent via SMTP. Because SMTP can be forwarded by legitimate remote mail servers, blocking on this signature can cause problems with your normal mail delivery, and we cannot "Recommend" a drop action. Use this signature with extreme caution and only on mail traffic you suspect to be invalid.
References