Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

SMTP AUTH brute force attack signature desperately needed

Ralsky's spam gang is doing widespread SMTP AUTH bruteforce attacks. They're succeeding. Has anyone developed a custom sig for SMTP AUTH brute force attack?

2 REPLIES

Re: SMTP AUTH brute force attack signature desperately needed

Have you cought any of the traffic? It would be nice to have a capture from anyone out there to work on it.

Eric

sends

Re: SMTP AUTH brute force attack signature desperately needed

After doing a seach on google i found this page.. I had to pull up a chached copy of it the server seemed to be down but this might help in building a sig. http://216.239.41.104/search?q=cache:WFd0AMn785UJ:chris-linfoot.net/linfoot/blogsphe.nsf/plinks/CWLT-5RQKYR+Ralsky+SMTP+AUTH&hl=en&ie=UTF-8

Eric

Sends

327
Views
0
Helpful
2
Replies
CreatePlease to create content