[Emerging-Sigs] EverBe 2.0

[Alan Knox]

Right now no, I don't have anything other than several machines were infected and management is asking whether or not there were any signatures in place. A search of the signatures didn't turn up anything but I figured I'd at least ask.

Thanks,


Alan

-----Original Message-----
From: Travis Green <tgreen at emergingthreats.net> 
Sent: Wednesday, April 3, 2019 1:02 PM
To: Alan Knox <alan2308a at gmail.com>
Cc: Emerging-sigs at emergingthreats.net
Subject: Re: [Emerging-Sigs] EverBe 2.0

A quick google search has revealed no file hashes. Do you have any
further info with regard to how this was delivered or if it performed
any network activity after infection?

-Travis

On Wed, Apr 3, 2019 at 10:53 AM Alan Knox <alan2308a at gmail.com> wrote:
>
> One of our sites just got hit by EverBe 2.0.  Are there any signatures for this malware? I’m getting a lot of questions about this and I didn’t see any.
>
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs at lists.emergingthreats.net
> https://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
>
> Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreats.net
>


-- 
PGP:
travisgreen.net/tgreen at emergingthreats.net.asc
travisgreen.net/travis at travisgreen.net.asc