| snort |
ET TROJAN Observed StrongPity CnC Domain in TLS SNI |
rev 2 |
2020-07-01 |
| snort |
ET TROJAN Glupteba CnC Checkin |
rev 2 |
2020-07-01 |
| snort |
ET TROJAN Observed StrongPity CnC Domain in TLS SNI |
rev 2 |
2020-07-01 |
| snort |
ET TROJAN Observed StrongPity CnC Domain in TLS SNI |
rev 2 |
2020-07-01 |
| snort |
ET TROJAN Observed StrongPity CnC Domain in TLS SNI |
rev 2 |
2020-07-01 |
| snort |
ET TROJAN Observed StrongPity CnC Domain in TLS SNI |
rev 2 |
2020-07-01 |
| snort |
ET MALWARE Predator Anti Ban CnC Activity |
rev 2 |
2020-06-30 |
| snort |
ET TROJAN Trojan/MSIL.DOTHETUK CnC Activity |
rev 2 |
2020-06-30 |
| suricata |
ET ADWARE_PUP Predator Anti Ban CnC Activity |
rev 1 |
2020-06-30 |
| suricata |
ET INFO Windows Quicktime User-Agent EOL With Known Bugs |
rev 4 |
2020-06-30 |
| snort |
ET CURRENT_EVENTS Successful Wombat Phishing Test |
rev 2 |
2020-06-29 |
| snort |
ET TROJAN RezoStealer CnC Checkin |
rev 2 |
2020-06-29 |
| snort |
ET POLICY LumOffice Uploading Screenshot |
rev 2 |
2020-06-29 |
| snort |
ET TROJAN LumOffice Checkin |
rev 2 |
2020-06-29 |
| snort |
ET CURRENT_EVENTS T-Mobile Phishing Landing |
rev 2 |
2020-06-29 |
| suricata |
ET PHISHING Successful Wombat Phishing Test |
rev 2 |
2020-06-29 |
| suricata |
ET PHISHING T-Mobile Phishing Landing |
rev 2 |
2020-06-29 |
| snort |
ET TROJAN RCtrl Backdoor CnC Checkin M1 |
rev 1 |
2020-06-26 |
| snort |
ET TROJAN Possible IndigoDrop/Cobalt Strike Download |
rev 2 |
2020-06-26 |
| suricata |
ET MALWARE RCtrl Backdoor CnC Checkin M1 |
rev 1 |
2020-06-26 |
| snort |
ET POLICY Suspicious Terse Request for .pif |
rev 2 |
2020-06-25 |
| snort |
ET TROJAN Rovnix CnC Domain in DNS Query |
rev 2 |
2020-06-25 |
| snort |
ET TROJAN RHttpCtrl Backdoor CnC |
rev 2 |
2020-06-25 |
| suricata |
ET MALWARE Rovnix CnC Domain in DNS Query |
rev 2 |
2020-06-25 |
| suricata |
ET MALWARE RHttpCtrl Backdoor CnC |
rev 1 |
2020-06-25 |
| snort |
ET TROJAN VikroStealer CnC Exfil |
rev 3 |
2020-06-24 |
| snort |
ET POLICY Suspicious Terse Request for .bmp |
rev 2 |
2020-06-24 |
| snort |
ET TROJAN HiveRAT CnC Activity M1 |
rev 1 |
2020-06-24 |
| suricata |
ET MALWARE HiveRAT CnC Activity M1 |
rev 1 |
2020-06-24 |
| suricata |
ET PHISHING Possible Phishing Landing - Data URI Inline Javascript 2016-02-09 |
rev 3 |
2020-06-24 |
| suricata |
ET WEB_SERVER Possible Custom Content Type Manager WP Backdoor Access |
rev 4 |
2020-06-24 |
| snort |
ET TROJAN Observed VikroStealer CnC Domain in TLS SNI |
rev 2 |
2020-06-23 |
| snort |
ET TROJAN SluttyPutty isDebuggerPresent in Fake Putty Executable |
rev 2 |
2020-06-23 |
| snort |
ET TROJAN CollectorStealer CnC Exfil |
rev 2 |
2020-06-22 |
| snort |
ET CURRENT_EVENTS Chalbhai Phishing Landing 2020-06-22 |
rev 2 |
2020-06-22 |
| snort |
ET TROJAN Observed VikroStealer CnC Domain in TLS SNI |
rev 2 |
2020-06-22 |
| snort |
ET TROJAN VikroStealer Retrieving Config |
rev 2 |
2020-06-22 |
| snort |
ET TROJAN Observed Win32/CollectorStealer User-Agent M1 |
rev 2 |
2020-06-22 |
| snort |
ET TROJAN Patchwork Staging Domain in DNS Query |
rev 2 |
2020-06-22 |
| snort |
ET TROJAN Observed Win32/CollectorStealer User-Agent M2 |
rev 3 |
2020-06-22 |