alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET CURRENT EVENTS Likely Storm Binary Requested (postcard.exe)"; flow:established,to_server; uricontent:"/postcard.exe"; nocase; classtype:trojan-activity; sid:2007760; rev:3;)

Added 2008-03-03 03:52:00 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET CURRENT EVENTS Likely Storm Binary Requested (postcard.exe)"; flow:established,to_server; uricontent:"/postcard.exe"; nocase; classtype:trojan-activity; sid:2007760; rev:3;)

Added 2008-03-03 03:52:00 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET CURRENT EVENTS Likely Storm Binary Requested (withlove.exe)"; flow:established,to_server; uricontent:"/withlove.exe"; nocase; classtype:trojan-activity; reference:url,asert.arbornetworks.com/2008/01/storm-loves-you-new-campaign-valentines-day-theme/; sid:2007760; rev:2;)

Added 2008-01-25 10:03:39 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET CURRENT EVENTS Likely Storm Binary Requested (withlove.exe)"; flow:established,to_server; uricontent:"/withlove.exe"; nocase; classtype:trojan-activity; reference:url,asert.arbornetworks.com/2008/01/storm-loves-you-new-campaign-valentines-day-theme/; sid:2007760; rev:2;)

Added 2008-01-25 10:03:39 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE CURRENT EVENTS Likely Storm Binary Requested (withlove.exe)"; flow:established,to_server; uricontent:"/withlove.exe"; nocase; classtype:trojan-activity; reference:url,asert.arbornetworks.com/2008/01/storm-loves-you-new-campaign-valentines-day-theme/; sid:2007760; rev:1;)

Added 2008-01-21 11:03:29 UTC