MALWARE-C2 Hancitor HTTP Connection

Rule ID

1139824

Severity

High

Description

Hancitor is a trojan which would send victim's information and receive C&C command for next stage APT attack.

Impact

Information disclosure

Recommendation

Update vendor's patch.

IPS Category

Malware traffic

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

Reference

Keyword

N/A