| suricata |
ET MOBILE_MALWARE XML Style POST Of IMEI International Mobile Equipment Identity |
rev 10 |
2020-08-18 |
| suricata |
ET USER_AGENTS Long Fake wget 3.0 User-Agent Detected |
rev 6 |
2020-08-18 |
| suricata |
ET SCAN OpenVAS User-Agent Inbound |
rev 6 |
2020-08-18 |
| snort |
ET TROJAN Echelon/DarkStealer Variant CnC Exfil |
rev 2 |
2020-08-17 |
| snort |
ET INFO BitNinja IO Security Check |
rev 2 |
2020-08-17 |
| snort |
ET CURRENT_EVENTS Successful Facebook Phish 2019-04-12 |
rev 4 |
2020-08-17 |
| snort |
ET CURRENT_EVENTS Successful Paxful Cryptocurrency Wallet Phish 2020-08-17 |
rev 2 |
2020-08-17 |
| suricata |
ET MALWARE [PTsecurity] Win32/TinyNuke Payload ACF40 Inbound |
rev 6 |
2020-08-17 |
| suricata |
ET INFO Maxmind geoip check to /app/geoip.js |
rev 4 |
2020-08-17 |
| suricata |
ET INFO BitNinja IO Security Check |
rev 2 |
2020-08-17 |
| suricata |
ET MALWARE Taidoor Checkin |
rev 7 |
2020-08-17 |
| suricata |
ET MALWARE Tibs/Harnig Downloader Activity |
rev 9 |
2020-08-17 |
| suricata |
ET MALWARE Win32/Fosniw MacTryCnt CnC Style Checkin |
rev 4 |
2020-08-17 |
| suricata |
ET MALWARE W32/Asprox.ClickFraudBot POST CnC Beacon |
rev 5 |
2020-08-17 |
| suricata |
ET MALWARE ZeroAccess/Max++ Rootkit C&C Activity 1 |
rev 4 |
2020-08-17 |
| suricata |
ET MALWARE Winsoft.E Checkin 1 |
rev 4 |
2020-08-17 |
| snort |
ET TROJAN Drovorub monitor Module Server Response |
rev 2 |
2020-08-13 |
| snort |
ET TROJAN Qudox CnC Activity |
rev 2 |
2020-08-13 |
| snort |
ET TROJAN Drovorub tunnel Module Server Response |
rev 2 |
2020-08-13 |
| snort |
ET CURRENT_EVENTS Possible Generic Microsoft Hosted Phishing Landing M2 |
rev 2 |
2020-08-13 |
| snort |
ET TROJAN Drovorub cloud.auth Module Server Response |
rev 2 |
2020-08-13 |
| snort |
ET TROJAN Drovorub shell Module Server Response |
rev 2 |
2020-08-13 |
| snort |
ET TROJAN Drovorub file Module Server Response |
rev 2 |
2020-08-13 |
| suricata |
ET PHISHING Successful iTunes Phish Mar 21 2014 |
rev 5 |
2020-08-13 |
| suricata |
ET PHISHING Successful iTunes Phish Mar 21 2014 |
rev 6 |
2020-08-13 |
| suricata |
ET PHISHING Possible Successful Phish - Generic POST to myform.php Feb 01 2013 |
rev 4 |
2020-08-13 |
| suricata |
ET USER_AGENTS Suspicious User-Agent Im Luo |
rev 6 |
2020-08-13 |
| suricata |
ET MALWARE Possible Winnti-related Destination |
rev 3 |
2020-08-13 |
| suricata |
ET MALWARE Possible Winnti-related Destination |
rev 3 |
2020-08-13 |
| suricata |
ET PHISHING Successful PayPal Phish Dec 19 2012 |
rev 5 |
2020-08-13 |
| suricata |
ET PHISHING Sparkasse Phishing Domain Nov 03 2017 |
rev 2 |
2020-08-13 |
| suricata |
ET MALWARE Possible Winnti-related Destination |
rev 3 |
2020-08-13 |
| suricata |
ET MALWARE Possible Winnti-related Destination |
rev 3 |
2020-08-13 |
| suricata |
ET PHISHING Chase/Bank of America Phishing Landing Uri Structure Nov 27 2012 |
rev 4 |
2020-08-13 |
| suricata |
ET ADWARE_PUP Win32/Onescan FraudWare User-Agent |
rev 5 |
2020-08-13 |
| suricata |
ET ADWARE_PUP W32/SpeedRunner User-Agent SRRemove |
rev 4 |
2020-08-13 |
| suricata |
ET PHISHING Anonisma Phishing CSS 2015-12-01 |
rev 4 |
2020-08-13 |
| suricata |
ET MALWARE Win32/Dynamer Trojan Dropper User-Agent VB Http |
rev 4 |
2020-08-13 |
| suricata |
ET PHISHING Raiffeisen Phishing Domain Nov 03 2017 |
rev 3 |
2020-08-13 |
| suricata |
ET MALWARE Possible Winnti-related Destination |
rev 3 |
2020-08-13 |