topic Cycbot User-Agent Traffic in General Topics https://live.paloaltonetworks.com/t5/general-topics/cycbot-user-agent-traffic/m-p/21115#M15417 <HTML><HEAD></HEAD><BODY><P>I couldn't find this in the threat database.</P><P>This is showing up in my Threat log?</P><P>Any ideas what this threat is?</P></BODY></HTML> Mon, 09 Jan 2012 19:54:17 GMT LCMember1607 2012-01-09T19:54:17Z Cycbot User-Agent Traffic https://live.paloaltonetworks.com/t5/general-topics/cycbot-user-agent-traffic/m-p/21115#M15417 <HTML><HEAD></HEAD><BODY><P>I couldn't find this in the threat database.</P><P>This is showing up in my Threat log?</P><P>Any ideas what this threat is?</P></BODY></HTML> Mon, 09 Jan 2012 19:54:17 GMT https://live.paloaltonetworks.com/t5/general-topics/cycbot-user-agent-traffic/m-p/21115#M15417 LCMember1607 2012-01-09T19:54:17Z Re: Cycbot User-Agent Traffic https://live.paloaltonetworks.com/t5/general-topics/cycbot-user-agent-traffic/m-p/21116#M15418 <HTML><HEAD></HEAD><BODY><P>Hi Bill,</P><P></P><P><SPAN>This is a signature for the Cycbot C2 traffic.&nbsp; See </SPAN><A class="jive-link-external-small" href="http://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Backdoor:Win32/Cycbot.B">http://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Backdoor:Win32/Cycbot.B</A><SPAN> for more information.&nbsp; The signature detects the user-agent string used in Cycbot phone-home HTTP traffic.</SPAN></P></BODY></HTML> Mon, 09 Jan 2012 20:57:54 GMT https://live.paloaltonetworks.com/t5/general-topics/cycbot-user-agent-traffic/m-p/21116#M15418 tettema 2012-01-09T20:57:54Z