Added Turla reference

Added Turla reference

Added Turla reference
12364bc7 · j0sm1 · 590ed089 · 12364bc7
Commit 12364bc7 authored 9 years ago by j0sm1
Show whitespace changes
Inline Side-by-side

Showing with 1 additions and 0 deletions

Turla.yar malware/Turla.yar +1 -0

No files found.
--- a/malware/Turla.yar
+++ b/malware/Turla.yar
@@ -11,6 +11,7 @@ rule WaterBug_turla_dll
        description = "Symantec Waterbug Attack - Trojan Turla DLL"
        author = "Symantec Security Response"
        date = "22.01.2015"
+        reference = "http://www.symantec.com/connect/blogs/turla-spying-tool-targets-governments-and-diplomats"   

    strings:
        $a = /([A-Za-z0-9]{2,10}_){,2}Win32\.dll\x00/