SSL: Untrusted Certificate (UTN-USERFirst-Hardware)
This signature detects SSL certificates issued by an untrusted source, UTN-USERFirst-Hardware. This is most commonly used to enhance the authenticity of a phishing attack, fooling the victim into thinking a fake site is valid. Accessing sites using these certificates instead of the valid issuer can result in a complete decryption of the SSL session by an attacker. Several popular websites, including Yahoo, Google, Gmail, MSN Live, Mozilla and Skype are affected.
References
URL: http://www.microsoft.com/technet/security/advisory/2524375.mspx
Short Name
SSL:UTN-USERFIRST-HARDWARE
Severity
Critical
Recommended
False
Recommended Action
Drop
Category
SSL
Keywords
(UTN-USERFirst-Hardware) Certificate Untrusted
Release Date
03/23/2011
Supported Platforms
mx-19.3
vmx-19.3
vsrx-19.2
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vmx-19.4
mx-19.4
srxevo-25.4
vsrx-26.2
srx-26.2
srx-branch-26.2
vsrx3bsd-26.2
mx-12.3
srx-12.3
srx-branch-12.3
vsrx-12.3
Sigpack Version
3375
False Positive
Unknown