Intrusion PreventionTFN.2k.Icmp
Description
It indicates detection of Internet Control Message Protocol (ICMP) traffic sent between TFN2K hosts.
Tribal Flood Network (TFN) is a backdoor trojan used for Distributed Denial-of-Service (DDOS) attacks. TFN2K hosts communicate with each other using ICMP messages to launch DDoS attacks.
Affected Products
Any TFN2K infected system is vulnerable to the attack
Impact
Compromised hosts can be used to launch attacks on other systems
Recommended Actions
Clean the infected system as soon as possible.
Use FortiGate to block the TFN traffic so as to protect the network.
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
References
1| ID | 12167 |
| Created | Sep 11, 2006 |
| Updated | Apr 23, 2014 |
| CVE ID | |
| Risk |
|
| Exploit Prediction Score | 0.97% |
| Default Action | pass |
| Active | |
| Affected OS | Other |
| Affected App | Other |
| Profile Type | Malware |