| snort |
ET TROJAN BF Botnet CnC Checkin |
rev 2 |
2020-05-22 |
| snort |
ET EXPLOIT UCM6202 1.0.18.13 - Remote Command Injection Attempt |
rev 2 |
2020-05-22 |
| snort |
ET EXPLOIT QNAP PhotoStation Pre-Auth Local File Disclosure Attempt |
rev 2 |
2020-05-21 |
| snort |
ET TROJAN SystemdMiner CnC Activity |
rev 2 |
2020-05-21 |
| snort |
ET EXPLOIT QNAP PhotoStation Authenticated Session Tampering Attempt |
rev 2 |
2020-05-21 |
| suricata |
ET INFO Remote Access - RView - Host - *.rview.com |
rev 4 |
2020-05-21 |
| suricata |
ET EXPLOIT QNAP PhotoStation Authenticated Session Tampering Attempt |
rev 1 |
2020-05-21 |
| suricata |
ET MALWARE Possible CryptoPHP Leaking Credentials May 8 2015 M1 |
rev 3 |
2020-05-21 |
| suricata |
ET MALWARE Possible CryptoPHP Leaking Credentials May 8 2015 M3 |
rev 3 |
2020-05-21 |
| suricata |
ET EXPLOIT QNAP PhotoStation Pre-Auth Local File Disclosure Attempt |
rev 1 |
2020-05-21 |
| suricata |
ET WEB_SPECIFIC_APPS Vulnerable Magento Adminhtml Access |
rev 3 |
2020-05-21 |
| suricata |
ET MALWARE Possible CryptoPHP Leaking Credentials May 8 2015 M2 |
rev 3 |
2020-05-21 |
| snort |
ET TROJAN NORTHSTAR Command Sent to Client |
rev 2 |
2020-05-19 |
| snort |
ET TROJAN NORTHSTAR Client Data POST |
rev 2 |
2020-05-19 |
| suricata |
ET EXPLOIT Metasploit Plugin-Detect Posting Data 7 |
rev 3 |
2020-05-19 |
| suricata |
ET EXPLOIT Metasploit Plugin-Detect Posting Data 6 |
rev 3 |
2020-05-19 |
| suricata |
ET MALWARE NORTHSTAR Command Sent to Client |
rev 1 |
2020-05-19 |
| suricata |
ET EXPLOIT Metasploit Plugin-Detect Posting Data 5 |
rev 3 |
2020-05-19 |
| suricata |
ET MOBILE_MALWARE Android.Trojan.SMSSend.Y |
rev 7 |
2020-05-19 |
| snort |
ET TROJAN Win32/Ramsay CnC Domain in DNS Query |
rev 2 |
2020-05-18 |
| snort |
ET TROJAN Parallax CnC Response Activity M10 |
rev 2 |
2020-05-18 |
| snort |
ET TROJAN Win32/Ramsay CnC Checkin |
rev 2 |
2020-05-18 |
| snort |
ET TROJAN AgentTesla Exfil Via SMTP |
rev 2 |
2020-05-18 |
| snort |
ET TROJAN Win32/Ramsay CnC Domain in DNS Query |
rev 2 |
2020-05-18 |
| suricata |
ET MALWARE Win32/Ramsay CnC Checkin |
rev 1 |
2020-05-18 |
| suricata |
ET MALWARE AgentTesla Exfil Via SMTP |
rev 1 |
2020-05-18 |
| suricata |
ET MALWARE Win32/Ramsay CnC Domain in DNS Query |
rev 2 |
2020-05-18 |
| suricata |
ET MALWARE Win32/Ramsay CnC Domain in DNS Query |
rev 2 |
2020-05-18 |
| suricata |
ET INFO Privdog Activation |
rev 3 |
2020-05-15 |
| suricata |
ET MOBILE_MALWARE Android/SMSThief.F Banker CnC Beacon |
rev 3 |
2020-05-15 |
| suricata |
ET INFO Pandora Usage |
rev 4 |
2020-05-15 |
| suricata |
ET MALWARE Filename server.exe Download - Common Hostile Filename |
rev 3 |
2020-05-14 |
| suricata |
ET WEB_SPECIFIC_APPS ManageEngine Desktop Central Administrator Account Creation |
rev 3 |
2020-05-14 |
| suricata |
ET MALWARE Filename svchost.exe Download - Common Hostile Filename |
rev 6 |
2020-05-14 |
| suricata |
ET WEB_SERVER PHP System Command in HTTP POST |
rev 5 |
2020-05-14 |
| suricata |
ET MALWARE Filename hkcmd.exe Download - Common Hostile Filename |
rev 4 |
2020-05-14 |
| suricata |
ET WEB_SERVER ATTACKER WebShell - 1337w0rm - cPanel Cracker |
rev 3 |
2020-05-14 |
| suricata |
ET WEB_SERVER MorXploit Shell Command |
rev 3 |
2020-05-14 |
| suricata |
ET MALWARE W32/TRCrypt.ULPM Downloader CnC Beacon |
rev 3 |
2020-05-14 |
| suricata |
ET MALWARE Filename explorer.exe Download - Common Hostile Filename |
rev 7 |
2020-05-14 |