• Announcements

    • Budfred

      IE 11 copy/paste problem

      It has come to our attention that people using Internet Explorer 11 (IE 11) are having trouble with copy/paste to the forum. If you encounter this problem, using a different browser like Firefox or Chrome seems to get around the problem. We do not know what the problem is, but it seems to be specific to IE 11 and we are hopeful that Microsoft will eventually fix it.
Sign in to follow this  
Followers 0

Snort Signatures for Malware

2 posts in this topic

I'm looking for a good source of information on the network traffic of the spyware that's being so dilligently discovered here.


I help maintain http://www.bleedingsnort.com. We're trying to expand the set of malware signatures we have for snort IDS.


I've got a few out there, Gator, 2020Search, etc. What we need to expand this is some knowledge of what the software does across the network. They're usually easy to detect if we can write a rule for it.


We'll write the rules. What we need is information, and ideally packet dumps, of identified spyware and malware.


Is this the right place for it? I certainly hope so.



Share this post

Link to post
Share on other sites

If you can write rules to detect the spyware why can't you get a PC, surf the web using some google searches for an hour, have spyware planted on that PC and then analyze it for signatures yourself?

I don't have the skills you have, however it appears to me that if you can write the signature files then you should be able to collect a ton of this stuff for analysis without anyone here giving you packet dumps etc.

I think you have a valid question here and I dont mean any disrespect for the request, it is very valid! You have the skills to start a collection of your own, and all it takes is a pc and an internet connection, the spyware will come to you!



Share this post

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  
Followers 0