##alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET DELETED Blackhole Exploit Kit JavaScript? colon string splitting"; flow:established,from_server; content:"

Added 2013-05-02 22:17:00 UTC


 

 
Please enter documentation, comments, false positives, or concerns with this signature. Press the Attach button below to add samples or Pcaps.
 




 
 

 


 

 

alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET CURRENT_EVENTS Blackhole Exploit Kit JavaScript colon string splitting"; flow:established,from_server; content:"

Added 2012-02-06 22:00:17 UTC