| suricata |
ET EXPLOIT Possible MySQL cnf overwrite CVE-2016-6662 Attempt |
rev 2 |
2019-10-08 |
| suricata |
ET WEB_SERVER Possible bash shell piped to dev udp Inbound to WebServer |
rev 4 |
2019-10-08 |
| suricata |
ET EXPLOIT Possible OpenVPN CVE-2014-6271 attempt |
rev 3 |
2019-10-08 |
| suricata |
ET MALWARE Win32/Spy.Agent.OHT - AnunakAPT TCP Checkin 1 |
rev 3 |
2019-10-08 |
| suricata |
ET MALWARE TinyLoader.B1 Checkin x64 |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE US-CERT TA14-353A Lightweight Backdoor 9 |
rev 2 |
2019-10-08 |
| suricata |
GPL SHELLCODE x86 0xEB0C NOOP |
rev 9 |
2019-10-08 |
| suricata |
ET MALWARE Suspicious X-mailer Synapse |
rev 3 |
2019-10-08 |
| suricata |
ET MALWARE Linux/Xnote Keep-Alive |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE Win32/Hikit Server Authentication Response |
rev 3 |
2019-10-08 |
| suricata |
ET SCAN SipCLI VOIP Scan |
rev 3 |
2019-10-08 |
| suricata |
ET INFO WinUpack Modified PE Header Outbound |
rev 7 |
2019-10-08 |
| suricata |
ET HUNTING Suspicious X-mailer Synapse Inbound to SMTP Server |
rev 2 |
2019-10-08 |
| suricata |
GPL SNMP PROTOS test-suite-trap-app attempt |
rev 6 |
2019-10-08 |
| suricata |
ET MALWARE Trojan.SpamBanker Report via SMTP |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE US-CERT TA14-353A Proxy Tool 1 |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE TrochilusRAT CnC Beacon 2 |
rev 3 |
2019-10-08 |
| suricata |
ET INFO Splashtop Remote Control Session Start Request |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE US-CERT TA14-353A Lightweight Backdoor 8 |
rev 2 |
2019-10-08 |
| suricata |
ET SNMP Samsung Printer SNMP Hardcode RW Community String |
rev 3 |
2019-10-08 |
| suricata |
ET MALWARE Windows WMIC SERVICE get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE W32/Jabberbot.A Trednet XMPP CnC Beacon |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE TinyLoader.B2 Checkin no architecture |
rev 2 |
2019-10-08 |
| snort |
ET WEB_CLIENT Observed DNS Query to Malicious Cookie Monster Roulette JS Cookie Stealer Exfil Domain |
rev 2 |
2019-10-04 |
| snort |
ET TROJAN Nemours/Proyecto RAT CnC Checkin |
rev 2 |
2019-10-04 |
| suricata |
ET MALWARE Nemours/Proyecto RAT CnC Checkin |
rev 3 |
2019-10-04 |
| snort |
ET TROJAN Win32/Phoenix Keylogger SMTP Exfil - Clipboard |
rev 2 |
2019-10-02 |
| snort |
ET TROJAN Win32/Phoenix Keylogger SMTP Exfil - Screenshot |
rev 2 |
2019-10-02 |
| snort |
ET TROJAN Win32/Phoenix Keylogger SMTP Exfil - Passwords |
rev 2 |
2019-10-02 |
| snort |
ET TROJAN Win32/Phoenix Keylogger Exfil via SMTP - Generic |
rev 2 |
2019-10-02 |
| snort |
ET TROJAN Win32/Phoenix Keylogger SMTP Exfil - Logs |
rev 2 |
2019-10-02 |
| suricata |
ET MALWARE Win32/Phoenix Keylogger SMTP Exfil - Clipboard |
rev 1 |
2019-10-02 |
| suricata |
ET MALWARE Win32/Phoenix Keylogger Exfil via SMTP - Generic |
rev 1 |
2019-10-02 |
| suricata |
ET MALWARE Win32/Phoenix Keylogger SMTP Exfil - Screenshot |
rev 1 |
2019-10-02 |
| suricata |
ET MALWARE Win32/Phoenix Keylogger SMTP Exfil - Passwords |
rev 1 |
2019-10-02 |
| suricata |
ET MALWARE Win32/Phoenix Keylogger SMTP Exfil - Logs |
rev 1 |
2019-10-02 |
| snort |
ET TROJAN DNSChanger CnC Domain in DNS Lookup |
rev 2 |
2019-10-01 |
| snort |
ET TROJAN DNSChanger CnC Domain in DNS Lookup |
rev 2 |
2019-10-01 |
| snort |
ET TROJAN DNSChanger CnC Domain in DNS Lookup |
rev 2 |
2019-10-01 |
| snort |
ET TROJAN DNSChanger CnC Domain in DNS Lookup |
rev 2 |
2019-10-01 |