MALWARE - classtype:misc-activity

Rule Signatures
1

Hey, I noticed a discrepancy between the class and the message:

ETPRO MALWARE Agent Tesla Exfil via SMTP
classtype:misc-activity; 
sid:2855245; 
former_category MALWARE, 
malware_family AgentTesla, 
confidence High, 
signature_severity Critical,

Best regards.
Jane.

1 Like
2

Thank you! We will have an updated version out with todays release.

JT

2 Likes