TROJAN: Dagger Client Connection

This signature detects attempts to connect to port 2589. This can indicate that an attacker is using the Trojan Dagger to remotely control the system.

Extended Description

Dagger is a remote adminstration tool. It enables remote attackers to control an infected machine.

Short Name
TROJAN:DAGGER:CLIENT-CONNECT
Severity
Major
Recommended
False
Recommended Action
Drop
Category
TROJAN
Keywords
CVE-1999-0660 Client Connection Dagger
Release Date
04/22/2003
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
Port
TCP/2589
False Positive
Unknown
CVSS Score

8.8

Found a potential security threat?