description-logoDescription

This indicates that a system might be infected by STRRAT Botnet.
STRRAT is a Java-based malware that can remotely control the infected computer. It has abilities to steal login credentials, execute arbitrary commands, and download other malware.

affected-products-logoAffected Products

Any unprotected Windows system is vulnerable.

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

If required, the signature's action can be set to "Block".
Please use Anti-Virus software to scan and clean the infected devices.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2021-11-09 18.193 Sig Added
2021-10-14 18.179