| snort |
ET CURRENT_EVENTS Successful Bank of America Phish M2 2016-08-31 |
rev 3 |
2020-08-07 |
| snort |
ET CURRENT_EVENTS Successful Amazon Phish 2016-10-27 |
rev 5 |
2020-08-07 |
| snort |
ET CURRENT_EVENTS Successful Facebook Phish 2018-01-26 |
rev 3 |
2020-08-07 |
| snort |
ET CURRENT_EVENTS Successful Facebook Phish 2019-08-29 |
rev 3 |
2020-08-07 |
| snort |
ET CURRENT_EVENTS Successful Facebook Phish 2020-01-10 |
rev 3 |
2020-08-07 |
| snort |
ET CURRENT_EVENTS Successful Bank of America Phish M1 2016-08-31 |
rev 3 |
2020-08-07 |
| snort |
ET CURRENT_EVENTS Successful Facebook Phish 2019-04-26 |
rev 3 |
2020-08-07 |
| suricata |
ET MALWARE Suspected Lockscreen Ransomware Activity |
rev 1 |
2020-08-07 |
| snort |
ET CURRENT_EVENTS Paypal Phishing Landing Feb 24 2017 |
rev 2 |
2020-08-06 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-08-06 |
| snort |
ET CURRENT_EVENTS Wells Fargo Phishing Landing 2018-02-02 M4 |
rev 3 |
2020-08-06 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-08-06 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-08-06 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-08-06 |
| snort |
ET CURRENT_EVENTS Possible Wells Fargo Phishing Landing - Title over non SSL |
rev 3 |
2020-08-06 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-08-06 |
| suricata |
ET SCAN Suspicious User-Agent Containing Web Scan/er Likely Web Scanner |
rev 7 |
2020-08-06 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-08-06 |
| suricata |
ET SCAN Suspicious User-Agent Containing Security Scan/ner Likely Scan |
rev 7 |
2020-08-06 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-08-06 |
| suricata |
ET SCAN Suspicious User-Agent Containing SQL Inject/ion Likely SQL Injection Scanner |
rev 8 |
2020-08-06 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-08-06 |
| snort |
ET TROJAN Unknown AutoIt Bot - Initial Server Response |
rev 1 |
2020-08-05 |
| snort |
ET TROJAN YAHOOYLO Stealer CnC Exfil |
rev 2 |
2020-08-05 |
| suricata |
ET MALWARE YAHOOYLO Stealer CnC Exfil |
rev 1 |
2020-08-05 |
| suricata |
ET WEB_SERVER Generic Webshell Activity |
rev 1 |
2020-08-05 |
| suricata |
ET MALWARE Possible DANDERSPRITZ HTTP Beacon |
rev 3 |
2020-08-05 |
| suricata |
ET MALWARE Unknown AutoIt Bot - Initial Server Response |
rev 1 |
2020-08-05 |
| suricata |
ET WEB_CLIENT HTA File Download Flowbit Set |
rev 3 |
2020-08-05 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed |
rev 1 |
2020-08-05 |
| snort |
ET CURRENT_EVENTS Possible Facebook Phishing Landing - Title over non SSL |
rev 4 |
2020-08-04 |
| snort |
ET CURRENT_EVENTS Phishing Landing via Tripod.com Mar 31 M3 |
rev 3 |
2020-08-04 |
| snort |
ET CURRENT_EVENTS Possible Facebook Phishing Landing - Title over non SSL |
rev 2 |
2020-08-04 |
| snort |
ET CURRENT_EVENTS Possible Facebook Phishing Landing - Title over non SSL |
rev 3 |
2020-08-04 |
| snort |
ET CURRENT_EVENTS Possible Facebook Phishing Landing - Title over non SSL |
rev 2 |
2020-08-04 |
| suricata |
ET INFO Possible ProxyShell Anonymous Access Connection |
rev 5 |
2020-08-04 |
| suricata |
ET MALWARE CozyCar CnC Beacon |
rev 3 |
2020-08-04 |
| suricata |
ET JA3 Hash - Possible InnocenceBot CnC |
rev 1 |
2020-08-04 |
| suricata |
ET INFO Possible ProxyShell Hide IP Installation file download |
rev 5 |
2020-08-04 |
| suricata |
ET EXPLOIT_KIT Fragus Exploit jar Download |
rev 4 |
2020-08-04 |