Comments on: MySpace Woes: Trojan Targets French Rock Band Fans http://blogs.mcafee.com/mcafee-labs/myspace-woes-trojan-targets-french-rock-band-fans Fri, 18 May 2012 09:34:59 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Didier Stevens http://blogs.mcafee.com/mcafee-labs/myspace-woes-trojan-targets-french-rock-band-fans/comment-page-1#comment-8060 Didier Stevens Mon, 19 Mar 2007 20:43:50 +0000 http://www.labs.com/research/blog/?p=222#comment-8060 I've posted an update: http://didierstevens.wordpress.com/2007/03/18/update-p0wned-by-a-qt-movie/ I’ve posted an update: http://didierstevens.wordpress.com/2007/03/18/update-p0wned-by-a-qt-movie/

]]> By: Russ McRee http://blogs.mcafee.com/mcafee-labs/myspace-woes-trojan-targets-french-rock-band-fans/comment-page-1#comment-8059 Russ McRee Mon, 19 Mar 2007 17:56:13 +0000 http://www.labs.com/research/blog/?p=222#comment-8059 Posted a Snort sig to BleedingThreats.net. alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE CURRENT EVENTS SpaceTalk-QT-js"; flow:to_server,established; uricontent:"/logs4/sqltrack.js"; nocase; classtype:trojan-activity; reference:url,didierstevens.wordpress.com/2007/03/12/p0wned-by-a-qt-movie/; sid:2003507; rev:1;) Posted a Snort sig to BleedingThreats.net.

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:”BLEEDING-EDGE CURRENT EVENTS SpaceTalk-QT-js”; flow:to_server,established; uricontent:”/logs4/sqltrack.js”; nocase; classtype:trojan-activity; reference:url,didierstevens.wordpress.com/2007/03/12/p0wned-by-a-qt-movie/; sid:2003507; rev:1;)

]]>