Freitag, 27. September 2013

Ruleset-Update: Wordpress-UA, probably Botnet-Attack?

[+] new sigs:
42000317 :: scanner.rules :: DN SCAN Wordpress-UA, probably Botnet-Attack



MainRule "str:wordpress/" "msg:DN SCAN Wordpress-UA, probably Botnet-Attack" "mz:$HEADERS_VAR:User-Agent" "s:$UWA:8" id:42000317 ;


refs:

http://thehackernews.com/2013/09/thousands-of-wordpress-blogs.html
http://pastebin.com/NP64hTQr


Keine Kommentare:

Kommentar veröffentlichen