Brambul.Worm
Description
This indicates that a system might be infected by Brambul.
Brambul is a brute-force authentication worm that is part of the HIDDEN COBRA campaign.
Affected Products
Any unprotected Windows system is vulnerable.
Impact
System Compromise: Remote attackers can gain access to information on vulnerable systems.
Recommended Actions
If required, the signature's action can be set to "Block".
Please use Anti-Virus software to scan and clean the infected devices.
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |