| snort |
ET CURRENT_EVENTS Netflix Phishing Landing 2017-07-20 |
rev 2 |
2018-07-20 |
| snort |
ET ATTACK_RESPONSE passwd file Outbound from WEB SERVER Linux |
rev 2 |
2018-07-20 |
| snort |
ET CURRENT_EVENTS Github Phishing Landing 2018-07-19 |
rev 2 |
2018-07-19 |
| snort |
ET CURRENT_EVENTS GitLab Phishing Landing 2018-07-19 |
rev 2 |
2018-07-19 |
| snort |
ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 Hex Escape Inbound Web Servers Likely Command Execution 8 |
rev 1 |
2018-07-19 |
| snort |
ET CURRENT_EVENTS Fake 404 With Hidden Login Form |
rev 2 |
2018-07-19 |
| snort |
ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 Hex Escape Inbound Web Servers Likely Command Execution 10 |
rev 1 |
2018-07-19 |
| snort |
ET WEB_SPECIFIC_APPS ELF file magic plain Inbound Web Servers Likely Command Execution 11 |
rev 2 |
2018-07-19 |
| snort |
ET WEB_SPECIFIC_APPS ELF file magic plain Inbound Web Servers Likely Command Execution 12 |
rev 2 |
2018-07-19 |
| snort |
ET CURRENT_EVENTS Twitter Phishing Landing 2018-07-19 |
rev 2 |
2018-07-19 |
| snort |
ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 Hex Escape Inbound Web Servers Likely Command Execution 9 |
rev 1 |
2018-07-19 |
| snort |
ET CURRENT_EVENTS Badoo Phishing Landing 2018-07-19 |
rev 2 |
2018-07-19 |
| snort |
ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 UTF-8 Inbound Web Servers Likely Command Execution 5 |
rev 1 |
2018-07-18 |
| snort |
ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 UTF-8 Inbound Web Servers Likely Command Execution 6 |
rev 1 |
2018-07-18 |
| snort |
ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 UTF-8 Inbound Web Servers Likely Command Execution 7 |
rev 1 |
2018-07-18 |
| snort |
ET TROJAN QRat.Java.RAT Checkin Response |
rev 3 |
2018-07-18 |
| snort |
ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Startup Script |
rev 2 |
2018-07-17 |
| snort |
ET EXPLOIT Nanopool Claymore Dual Miner Remote Code Execution Linux |
rev 1 |
2018-07-17 |
| snort |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup |
rev 2 |
2018-07-17 |
| snort |
ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Add Root Htpasswd |
rev 2 |
2018-07-17 |
| snort |
ET POLICY Powershell Command With No Profile Argument Over SMB - Likely Lateral Movement |
rev 1 |
2018-07-17 |
| snort |
ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Disable Firewall |
rev 2 |
2018-07-17 |
| snort |
ET POLICY RunDll Request Over SMB - Likely Lateral Movement |
rev 2 |
2018-07-17 |
| snort |
ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Process Kill |
rev 2 |
2018-07-17 |
| snort |
ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Configuration Download |
rev 2 |
2018-07-17 |
| snort |
ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Service Enable |
rev 2 |
2018-07-17 |
| snort |
ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Configuration Download |
rev 2 |
2018-07-17 |
| snort |
ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Add Admin Passwd |
rev 2 |
2018-07-17 |
| snort |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 2 |
rev 1 |
2018-07-17 |
| snort |
ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Default Credentials |
rev 2 |
2018-07-17 |
| snort |
ET POLICY Powershell Command With Execution Bypass Argument Over SMB - Likely Lateral Movement |
rev 1 |
2018-07-17 |
| snort |
ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Change Admin Passwd |
rev 2 |
2018-07-17 |
| snort |
ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Crontab |
rev 2 |
2018-07-17 |
| snort |
ET POLICY Powershell Command With NonInteractive Argument Over SMB - Likely Lateral Movement |
rev 1 |
2018-07-17 |
| snort |
ET WEB_SPECIFIC_APPS ELF file magic encoded ASCII Inbound Web Servers Likely Command Execution 4 |
rev 2 |
2018-07-17 |
| snort |
ET EXPLOIT Nanopool Claymore Dual Miner Remote Code Execution Windows |
rev 2 |
2018-07-17 |
| snort |
ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Service Stop |
rev 2 |
2018-07-17 |
| snort |
ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Configuration Download |
rev 2 |
2018-07-17 |
| snort |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 5 |
rev 1 |
2018-07-17 |
| snort |
ET POLICY Powershell Command With Hidden Window Argument Over SMB - Likely Lateral Movement |
rev 2 |
2018-07-17 |