| suricata |
ET EXPLOIT Metasploit Plugin-Detect Posting Data 1 |
rev 5 |
2020-04-27 |
| suricata |
ET MALWARE W32/Liftoh.Downloader Feed404 CnC Beacon |
rev 3 |
2020-04-27 |
| suricata |
ET HUNTING Suspicious Jar name JavaUpdate.jar |
rev 4 |
2020-04-27 |
| suricata |
ET MALWARE Hiloti/Mufanom Downloader Checkin |
rev 11 |
2020-04-27 |
| suricata |
ET MOBILE_MALWARE Android/HeHe.Spy GetTaskRequest CnC Beacon |
rev 4 |
2020-04-27 |
| suricata |
ET MALWARE WindowsEnterpriseSuite FakeAV check-in GET |
rev 8 |
2020-04-27 |
| suricata |
ET MALWARE Kishop.A checkin |
rev 3 |
2020-04-27 |
| suricata |
ET EXPLOIT Metasploit Plugin-Detect Posting Data 2 |
rev 5 |
2020-04-27 |
| suricata |
ET MALWARE Trojan.BlackRev Download Executable |
rev 6 |
2020-04-27 |
| snort |
ET TROJAN Parallax CnC Response Activity M9 |
rev 2 |
2020-04-25 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on Compromised External Server |
rev 2 |
2020-04-24 |
| snort |
ET WEB_SERVER Leaf PHPMailer Accessed on Internal Server |
rev 2 |
2020-04-24 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on Compromised External Server |
rev 2 |
2020-04-24 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Compromised Internal Server |
rev 2 |
2020-04-24 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on Compromised External Server |
rev 2 |
2020-04-24 |
| snort |
ET MOBILE_MALWARE NSO Group CnC Domain in DNS Lookup |
rev 2 |
2020-04-24 |
| snort |
ET WEB_CLIENT Leaf PHPMailer Accessed on External Server |
rev 2 |
2020-04-24 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Compromised Internal Server |
rev 2 |
2020-04-24 |
| snort |
ET MOBILE_MALWARE NSO Group CnC Domain in DNS Lookup |
rev 2 |
2020-04-24 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Compromised Internal Server |
rev 2 |
2020-04-24 |
| snort |
ET MOBILE_MALWARE NSO Group CnC Domain in DNS Lookup |
rev 2 |
2020-04-24 |
| snort |
ET MOBILE_MALWARE NSO Group CnC Domain in DNS Lookup |
rev 2 |
2020-04-24 |
| suricata |
ET MALWARE Suspicious User-Agent MyAgrent |
rev 4 |
2020-04-24 |
| suricata |
ET MALWARE W32/TCYWin.Downloader User-Agent |
rev 4 |
2020-04-24 |
| suricata |
ET INFO Logmein.com Host List Download |
rev 10 |
2020-04-24 |
| suricata |
ET MALWARE Possible Win32.Bicololo Checkin |
rev 4 |
2020-04-24 |
| suricata |
ET WEB_SERVER ColdFusion password.properties access |
rev 4 |
2020-04-24 |
| suricata |
ET WEB_SERVER Possible OpenX Backdoor Backdoor Access POST to flowplayer |
rev 4 |
2020-04-24 |
| suricata |
ET MALWARE Tibs Checkin |
rev 7 |
2020-04-24 |
| suricata |
ET USER_AGENTS Unknown - Java Request - gt 60char hex-ascii |
rev 7 |
2020-04-24 |
| suricata |
ET EXPLOIT_KIT Watering Hole applet name AppletHigh.jar |
rev 5 |
2020-04-24 |
| suricata |
ET EXPLOIT_KIT Unknown Malvertising Exploit Kit Hostile Jar app.jar |
rev 5 |
2020-04-24 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Compromised Internal Server |
rev 2 |
2020-04-24 |
| suricata |
ET WEB_SERVER Leaf PHPMailer Accessed on Internal Server |
rev 1 |
2020-04-24 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Compromised Internal Server |
rev 2 |
2020-04-24 |
| suricata |
ET WEB_SERVER WebShell - GODSpy - Cookie |
rev 3 |
2020-04-24 |
| suricata |
ET WEB_SERVER WebShell - GODSPy - Auth Creds |
rev 3 |
2020-04-24 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on Compromised External Server |
rev 2 |
2020-04-24 |
| suricata |
ET WEB_SERVER WebShell Generic - ASP File Uploaded |
rev 12 |
2020-04-24 |
| suricata |
ET WEB_SERVER - EXE File Uploaded - Hex Encoded |
rev 3 |
2020-04-24 |