Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
CHAT:IRC:BOTNET:W3TW0RK-RCE |
|---|---|
Severity |
Major |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
CHAT |
Keywords |
w3tw0rk Or Pitbul IRC Bot Remote Code Execution |
Release Date |
2016/08/18 |
Update Number |
2769 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
CHAT: w3tw0rk Or Pitbul IRC Bot Remote Code Execution
This signature detects chat patterns associated with the w3tw0rk or Pitbul IRC BotNet. Computers infected with malware can use the Internet Relay Chat protocol to "phone home" for instructions by the Botnet controller. It may also be a false positive.