| snort |
ET INFO Possible Malicious Document Request to .tk domain |
rev 2 |
2020-07-14 |
| snort |
ET INFO Possible Malicious Document Request to .tk domain |
rev 2 |
2020-07-14 |
| suricata |
ET WEB_SERVER Possible CVE-2016-5118 Exploit SVG attempt M2 |
rev 3 |
2020-07-14 |
| suricata |
ET WEB_SERVER Possible CVE-2016-5118 Exploit SVG attempt M1 |
rev 3 |
2020-07-14 |
| suricata |
ET ADWARE_PUP ZoomInfo Contact Contributor Install |
rev 1 |
2020-07-14 |
| suricata |
ET INFO HTTP POST Request to DuckDNS Domain |
rev 1 |
2020-07-14 |
| snort |
ET WEB_CLIENT Generic Webshell Password Prompt Accessed on External Compromised Server |
rev 2 |
2020-07-13 |
| snort |
ET TROJAN Win32/DTStealer CnC Activity |
rev 2 |
2020-07-13 |
| snort |
ET WEB_SERVER Generic Webshell Password Prompt Accessed on Internal Compromised Server |
rev 2 |
2020-07-13 |
| snort |
ET WEB_SERVER FiercePhish Password Prompt Accessed on Internal Server |
rev 2 |
2020-07-13 |
| snort |
ET WEB_CLIENT FiercePhish Password Prompt Accessed on External Server |
rev 2 |
2020-07-13 |
| suricata |
ET WEB_SERVER Generic Webshell Password Prompt Accessed on Internal Compromised Server |
rev 2 |
2020-07-13 |
| suricata |
ET WEB_CLIENT Generic Webshell Password Prompt Accessed on External Compromised Server |
rev 2 |
2020-07-13 |
| suricata |
ET WEB_CLIENT FiercePhish Password Prompt Accessed on External Server |
rev 2 |
2020-07-13 |
| suricata |
ET WEB_SERVER FiercePhish Password Prompt Accessed on Internal Server |
rev 2 |
2020-07-13 |
| snort |
ET TROJAN ELF/BASHLITE vbot Variant CnC |
rev 1 |
2020-07-10 |
| suricata |
ET MALWARE ELF/BASHLITE vbot Variant CnC |
rev 1 |
2020-07-10 |
| snort |
ET GAMES Dragon Raja Activity |
rev 2 |
2020-07-08 |
| suricata |
ET GAMES Dragon Raja Activity |
rev 1 |
2020-07-08 |
| snort |
ET TROJAN DCRat Initial CnC Activity |
rev 3 |
2020-07-07 |
| snort |
ET TROJAN SuperKillerX Checkin Activity |
rev 1 |
2020-07-07 |
| snort |
ET TROJAN Observed TaurusStealer CnC Domain in TLS SNI |
rev 2 |
2020-07-07 |
| snort |
ET TROJAN SuperKillerX CnC Activity |
rev 1 |
2020-07-07 |
| suricata |
ET PHISHING Adobe Online Document Phishing Landing M2 2016-04-25 |
rev 3 |
2020-07-07 |
| suricata |
ET MALWARE SuperKillerX Checkin Activity |
rev 1 |
2020-07-07 |
| suricata |
ET MALWARE SuperKillerX CnC Activity |
rev 1 |
2020-07-07 |
| snort |
ET POLICY CommandCam Download |
rev 2 |
2020-07-06 |
| snort |
ET TROJAN W32/Echmark/MarkiRAT CnC Host Checkin |
rev 2 |
2020-07-06 |
| snort |
ET WEB_CLIENT Generic Mailer Accessed on External Server |
rev 2 |
2020-07-06 |
| snort |
ET WEB_CLIENT Generic Mailer Accessed on Internal Server |
rev 3 |
2020-07-06 |
| snort |
ET WEB_SERVER Generic Mailer Accessed on Internal Server |
rev 2 |
2020-07-06 |
| snort |
ET TROJAN W32/Echmark/MarkiRAT CnC Response |
rev 2 |
2020-07-06 |
| snort |
ET TROJAN W32/Echmark/MarkiRAT CnC Request |
rev 2 |
2020-07-06 |
| suricata |
ET INFO CommandCam Download |
rev 1 |
2020-07-06 |
| suricata |
ET WEB_SERVER Generic Mailer Accessed on Internal Server |
rev 2 |
2020-07-06 |
| suricata |
ET WEB_CLIENT Generic Mailer Accessed on Internal Server |
rev 3 |
2020-07-06 |
| suricata |
ET WEB_CLIENT Generic Mailer Accessed on External Server |
rev 2 |
2020-07-06 |
| snort |
ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI |
rev 2 |
2020-07-03 |
| snort |
ET WEB_SERVER Predator the Thief Password Prompt Accessed on Internal Compromised Server |
rev 2 |
2020-07-03 |
| snort |
ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI |
rev 2 |
2020-07-03 |