[Emerging-Sigs] Turkish Language C&C Channel

[Matt Jonkman]

http://doc.emergingthreats.net/bin/view/Main/Win32Turkojan

Win32.Turkojan.jv came across our sights today. Found by Victor Julien, 
this is the first Turkish language C&C channel we've seen in a long 
time. (Don't recall the last one...)

High ports, plaintext channel using simple commands and responses. Sigs 
2008021-2008028 will cover this well. More information at the link 
above, including text of a control session.

Matt
-- 
--------------------------------------------
Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
--------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc