TROJAN: Aldi Bot Detection

This signature detects known bot activity heavily linked to the Aldi Bot. The Aldi Bot offers HTTP and TCP DDoS capabilities along with Firefox, Pidgin and jDownloader credential theft, the creation of a SOCKS5 proxy and the ability to download and execute malicious code of the attacker's choice.

Short Name
TROJAN:ALDIBOT-DETECTION
Severity
Major
Recommended
False
Recommended Action
Drop
Category
TROJAN
Keywords
Aldi Bot Detection
Release Date
11/01/2011
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3375
False Positive
Unknown

Found a potential security threat?