MALWARE-FILE-TRANSFER HackTool.Win64.FrostyGoop

Rule ID

1235384

Severity

High

Description

HackTool.Win64.FrostyGoop malware transfer which could define target and remote execute Modbus specific functions.

Impact

Others

Recommendation

Update vendor's patch.

IPS Category

Malware traffic

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

FrostyGoop, BUSTLEBERM