alert udp $HOME_NET any -> any 53 (msg:"ET TROJAN Known Hostile Domain citi-bank.ru Lookup"; content:"|09|citi-bank|02|ru|00|"; nocase; classtype:trojan-activity; sid:2012728; rev:4; metadata:created_at 2011_04_26, updated_at 2011_04_26;)
Added 2017-08-07 21:05:54 UTC
alert udp $HOME_NET any -> any 53 (msg:"ET TROJAN Known Hostile Domain citi-bank.ru Lookup"; content:"|09|citi-bank|02|ru|00|"; nocase; classtype:trojan-activity; sid:2012728; rev:4;)
Added 2014-09-12 16:28:32 UTC
alert udp $HOME_NET any -> any 53 (msg:"ET CURRENT_EVENTS Known Hostile Domain citi-bank.ru Lookup"; content:"|09|citi-bank|02|ru|00|"; nocase; classtype:trojan-activity; sid:2012728; rev:3;)
Added 2011-10-12 19:35:04 UTC
alert udp $HOME_NET any -> any 53 (msg:"ET CURRENT_EVENTS Known Hostile Domain citi-bank.ru Lookup"; content:"|09|citi-bank|02|ru|00|"; nocase; classtype:trojan-activity; sid:2012728; rev:3;)
Added 2011-04-26 18:47:18 UTC