TROJAN: Dagger Server Response

This signature detects response sent from local TCP port 2589. This can indicate that an attacker is using the Trojan Dagger to remotely control the system.

Extended Description

Dagger is a remote administration tool. It enables remote attackers to control an infected machine.

Short Name
TROJAN:DAGGER:SERVER-RES
Severity
Major
Recommended
False
Recommended Action
Drop
Category
TROJAN
Keywords
CVE-1999-0660 Dagger Response Server
Release Date
04/22/2003
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
Port
TCP/2589
False Positive
Unknown
CVSS Score

8.8

Found a potential security threat?