Endpoint Protection Small Business Edition

 View Only
  • 1.  Definition of Network Scan threats (Muieblackcat)

    Posted Apr 10, 2018 09:01 PM

    Hi All,

    This may not be the correct forum, however looking to understand where I can find actual definition of a Network scanner threat received recently (Muieblackcat) which was blocked by Symantec client

     

    The understanding is that the threat is detected when a external request comes through for \muieblackcat directory of a webhost however looking for some formal documentation explaining

    Thanks



  • 2.  RE: Definition of Network Scan threats (Muieblackcat)

    Posted Apr 16, 2018 09:10 AM

    Muieblackcat is a vulnerability scanning product for web servers. Remote attackers can use Muieblackcat to detect vulnerabilities on a target server.

    Symantec definition of Muieblackcat Scanner Request: https://www.symantec.com/security_response/attacksignatures/detail.jsp?asid=30258

    Link for more details: https://serverfault.com/questions/309309/what-is-muieblackcat