Snort mailing list archives
Sourcefire VRT Certified Snort Rules Update 2010-09-10
From: Research <research () sourcefire com>
Date: Fri, 10 Sep 2010 15:16:34 -0400 (EDT)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sourcefire VRT Certified Snort Rules Update Synopsis: The Sourcefire VRT is aware of a virus currently spreading on the Internet. Details: VBMania Mass Mailing Worm The VBMania mass mailing worm is known to be propagating throughout the Internet via email. The virus will copy itself to mapped drives on the victim host and attempt to use MAPI to mail itself to all contacts found on the system. Rules to detect attacks by this virus are included in this release and are identified with GID 1, SIDs 17234 and 17235. For a complete list of new and modified rules please see: http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2010-09-10.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) iD8DBQFMioB1QcQOxItLLaMRApx9AJ0dM7l88iPZvV61y1ideLAw9PcY8ACfXMBA DZfrsuQ6a6jcIdu2frBPlmQ= =k6gR -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Start uncovering the many advantages of virtual appliances and start using them to simplify application deployment and accelerate your shift to cloud computing http://p.sf.net/sfu/novell-sfdev2dev _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs
Current thread:
- Sourcefire VRT Certified Snort Rules Update 2010-09-10 Research (Sep 10)