SID 1:53090

Rule Category

MALWARE-TOOLS --

Alert Message

MALWARE-TOOLS Malicious HTML application download attempt

Rule Explanation

This event is generated when an attempt to download a malicious HTML application has been detected. Impact: High Details: A malicious documents campaign has been identified to be spread using malicious RTF documents and HTML applications. This rule will detect any communication related with that campaign and the attempts of stealing information from the victim's computer Ease of Attack: Medium

What To Look For

No information provided

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group