| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M61 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M54 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M64 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M57 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M70 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M65 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M62 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M53 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M69 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M66 |
rev 1 |
2026-08-21 |
| splunk |
Python PTH File Creation During Package Installation |
production |
2026-08-21 |
| splunk |
Python Network Traffic During Package Build |
production |
2026-08-21 |
| splunk |
Python PYTHONPATH Modification During Package Installation |
production |
2026-08-21 |
| splunk |
Python Site Hooks Creation During Package Installation |
production |
2026-08-21 |
| elastic |
Kubernetes Unusual Decision by User Agent |
deprecated |
2026-08-21 |
| elastic |
GKE Service Account Token Created via TokenRequest API |
deprecated |
2026-08-21 |
| elastic |
Kubernetes Denied Service Account Request via Unusual User Agent |
deprecated |
2026-08-21 |
| elastic |
MFA Disabled for Google Workspace Organization |
deprecated |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M47 |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M40 |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M48 |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M42 |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M36 |
rev 1 |
2026-08-20 |
| snort |
ET INFO Tailscale DERP Relay Server in TLS SNI |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M38 |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M35 |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M46 |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M49 |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M32 |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M45 |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M50 |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M39 |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M31 |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M34 |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M37 |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M43 |
rev 1 |
2026-08-20 |
| snort |
ET INFO Tailscale Control Pane in DNS Query |
rev 1 |
2026-08-20 |
| snort |
ET INFO Tailscle DERP Relay Server in DNS Query |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M41 |
rev 1 |
2026-08-20 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M44 |
rev 1 |
2026-08-20 |