| snort |
ET CURRENT_EVENTS Possible Injected JS Form Stealer Checking Page Contents M1 |
rev 2 |
2019-08-07 |
| snort |
ET TROJAN Win32/Onliner Receiving Commands from CnC |
rev 2 |
2019-08-06 |
| snort |
ET TROJAN Win32/Onliner CnC Checkin |
rev 2 |
2019-08-06 |
| snort |
ET TROJAN Win32/Onliner Template 1 Active - Malicious Outbound Email Spam |
rev 2 |
2019-08-06 |
| snort |
ET TROJAN Win32/Onliner Requesting Additional Modules |
rev 2 |
2019-08-06 |
| snort |
ET MOBILE_MALWARE Trojan.AndroidOS.TimpDoor Module Download Request |
rev 2 |
2019-08-06 |
| snort |
ET TROJAN Covenant Framework Default HTTP Beacon |
rev 2 |
2019-08-04 |
| snort |
ET TROJAN Covenant Framework HTTP Hello World Server Response |
rev 2 |
2019-08-04 |
| snort |
ET CURRENT_EVENTS Successful Generic Credit Card Information Phish 2019-08-02 |
rev 2 |
2019-08-02 |
| snort |
ET CURRENT_EVENTS Obfuscated LordEK Landing M2 |
rev 2 |
2019-08-02 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET POLICY Windows Update P2P Activity |
rev 2 |
2019-07-31 |
| snort |
ET TROJAN Win32/Phorpiex CnC Checkin |
rev 2 |
2019-07-31 |
| snort |
ET TROJAN Win32/Phorpiex Template 5 Active - Outbound Malicious Email Spam |
rev 2 |
2019-07-31 |
| suricata |
ET MALWARE Win32/Phorpiex Template 5 Active - Outbound Malicious Email Spam |
rev 1 |
2019-07-31 |
| suricata |
ET INFO Windows Update P2P Activity |
rev 2 |
2019-07-31 |
| snort |
ET CURRENT_EVENTS Successful Generic Adobe Phish 2019-07-29 |
rev 2 |
2019-07-29 |
| snort |
ET TROJAN Possible ICMP Backdoor Tunnel Command - whoami |
rev 1 |
2019-07-29 |
| suricata |
ET MALWARE Possible ICMP Backdoor Tunnel Command - whoami |
rev 1 |
2019-07-29 |
| snort |
ET DNS Query for .cc TLD |
rev 2 |
2019-07-26 |
| snort |
ET DNS Query for .to TLD |
rev 2 |
2019-07-26 |
| snort |
ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound |
rev 3 |
2019-07-26 |
| suricata |
GPL RPC STATD UDP stat mon_name format string exploit attempt |
rev 11 |
2019-07-26 |
| suricata |
ET MALWARE Banload Downloader Infection - Sending initial email to owner |
rev 4 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS NT Trans NT CREATE oversized Security Descriptor attempt |
rev 4 |
2019-07-26 |
| suricata |
ET DOS Likely NTP DDoS In Progress GET_RESTRICT Response to Non-Ephemeral Port IMPL 0x02 |
rev 4 |
2019-07-26 |
| suricata |
GPL RPC portmap ypupdated request UDP |
rev 10 |
2019-07-26 |