SMTP: .CRT

This signature detects e-mail attachments that have the extension .crt and sent received through SMTP. Because .CRTs (Security Certificate) files can contain executable code, this can indicate an incoming e-mail virus. Attackers can create malicious executable code, tricking users into executing the file and infecting the system.

Extended Description

The impact on the target system is dependent on the instructions contained in the malicious .crt file.

References

URL: http://www.cknow.com/vtutor/FileExtensions.html http://www.novatone.net/mag/mailsec.htm http://support.microsoft.com/?kbid=235309

Short Name

SMTP:EXT:DOT-CRT

Severity

Warning

Recommended

False

Recommended Action

None

SMTP: .CRT

Extended Description

References

Found a potential security threat?