Intrusion PreventionSNIcat.Data.Exfiltration.Tool
Description
This indicates detection of an attempt to use SNIcat.
SNIcat is a data exfiltration tool. It performs data exfiltration via SNI (Server Name Indication), a TLS Client Hello extension.
Affected Products
All unprotected systems are vulnerable
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Monitor the traffic from the network for any suspicious activity.
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| ID | 50952 |
| Created | Nov 29, 2021 |
| Updated | May 04, 2022 |
| CVE ID | |
| Risk |
|
| Exploit Prediction Score | 0.34% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Other |
| Profile Type | Malware |