[Emerging-Sigs] Updated Myspace

Matt Jonkman jonkman at jonkmans.com
Tue Jul 8 12:00:17 EDT 2008


Mike Wall sent in a modification tot he existing myspace sig, they're 
using a new url:

#by Mike Wall at BLCPro, LLC

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY 
Myspace Login Attempt"; flow:established,to_server; 
content:"secure.myspace.com"; uricontent:"/index.cfm?fuseaction=login"; 
classtype:policy-violation; sid:2002872; rev:4;)

Thanks Mike, posting now

Matt

-- 
--------------------------------------------
Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
--------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc




More information about the Emerging-sigs mailing list