| suricata |
ET JA3 Hash - Possible InnocenceBot CnC |
rev 1 |
2020-08-04 |
| suricata |
ET WORM Possible Worm Sohanad.Z or Other Infection Request for setting.nql |
rev 5 |
2020-08-04 |
| suricata |
ET EXPLOIT_KIT Fragus Exploit jar Download |
rev 4 |
2020-08-04 |
| suricata |
ET INFO Possible ProxyShell Hide IP Installation file download |
rev 5 |
2020-08-04 |
| snort |
ET POLICY XenArmor Password Recovery License Check |
rev 3 |
2020-08-03 |
| snort |
ET CURRENT_EVENTS Possible Dropbox Phishing Landing - Title over non SSL |
rev 2 |
2020-08-03 |
| snort |
ET CURRENT_EVENTS Paypal Phishing Landing 2018-01-18 M1 |
rev 3 |
2020-08-03 |
| snort |
ET CURRENT_EVENTS Possible iCloud Phishing Landing - Title over non SSL |
rev 2 |
2020-08-03 |
| suricata |
ET MALWARE Win32/CryptFile2 Ransomware Checkin |
rev 5 |
2020-08-03 |
| suricata |
ET WEB_SERVER SQL Injection Select Sleep Time Delay |
rev 4 |
2020-08-03 |
| suricata |
ET INFO External IP Address Lookup - b4secure .com |
rev 3 |
2020-08-03 |
| snort |
ET INFO HTTP POST Form Submitted to Weebly Free Hosting |
rev 2 |
2020-07-31 |
| snort |
ET MALWARE FormatFactory Install Checkin |
rev 2 |
2020-07-31 |
| snort |
ET INFO HTTP POST Form Submitted to 123formbuilder Free Hosting |
rev 2 |
2020-07-31 |
| snort |
ET EXPLOIT Attempted Netgear Buffer Overflow into RCE Inbound M2 |
rev 2 |
2020-07-31 |
| snort |
ET TROJAN OILRIG CnC POST |
rev 2 |
2020-07-31 |
| snort |
ET EXPLOIT Attempted Netgear Buffer Overflow into RCE Inbound M1 |
rev 2 |
2020-07-31 |
| snort |
ET TROJAN Matiex Keylogger Exfil Via Telegram |
rev 2 |
2020-07-31 |
| suricata |
ET ADWARE_PUP FormatFactory Install Checkin |
rev 2 |
2020-07-31 |
| snort |
ET CURRENT_EVENTS Generic Financial Phone Support Scam/Phishing Landing M2 |
rev 2 |
2020-07-30 |
| snort |
ET CURRENT_EVENTS Possible Phishing Script Hosted on 000webhostapp |
rev 2 |
2020-07-30 |
| snort |
ET CURRENT_EVENTS Generic Webmail Phishing Landing |
rev 2 |
2020-07-30 |
| snort |
ET CURRENT_EVENTS Generic Financial Phone Support Scam/Phishing Landing M1 |
rev 2 |
2020-07-30 |
| snort |
ET CURRENT_EVENTS Instagram Fake Copyright Infringement Hosted on 000webhostapp |
rev 2 |
2020-07-30 |
| suricata |
ET PHISHING Instagram Fake Copyright Infringement Hosted on 000webhostapp |
rev 2 |
2020-07-30 |
| suricata |
ET PHISHING Generic Financial Phone Support Scam/Phishing Landing M1 |
rev 2 |
2020-07-30 |
| suricata |
ET PHISHING Observed Let's Encrypt Certificate containing Instagram |
rev 2 |
2020-07-30 |
| suricata |
ET PHISHING Generic Financial Phone Support Scam/Phishing Landing M2 |
rev 2 |
2020-07-30 |
| suricata |
ET PHISHING Possible Phishing Script Hosted on 000webhostapp |
rev 2 |
2020-07-30 |
| snort |
ET TROJAN ThiefQuest CnC Domain in DNS Lookup |
rev 2 |
2020-07-29 |
| snort |
ET CURRENT_EVENTS Generic Phishing Panel Accessed on Internal Server |
rev 2 |
2020-07-29 |
| snort |
ET CURRENT_EVENTS Generic Phishing Panel Accessed on External Server |
rev 2 |
2020-07-29 |
| suricata |
ET PHISHING Generic Phishing Panel Accessed on Internal Server |
rev 2 |
2020-07-29 |
| suricata |
ET INFO Windows 98 User-Agent Detected - Possible Malware or Non-Updated System |
rev 22 |
2020-07-29 |
| suricata |
ET PHISHING Generic Phishing Panel Accessed on External Server |
rev 2 |
2020-07-29 |
| snort |
ET TROJAN JS/Ostap CnC Activity |
rev 2 |
2020-07-28 |
| sigma |
Windows Defender Threat Detected |
stable |
2020-07-28 |
| snort |
ET TROJAN IP Grabber CnC Activity |
rev 2 |
2020-07-27 |
| snort |
ET TROJAN Win32/CollectorStealer CnC Exfil M3 |
rev 2 |
2020-07-27 |
| snort |
ET CURRENT_EVENTS Successful TeamIPwned Phish 2016-08-30 |
rev 2 |
2020-07-27 |