| snort |
ET CURRENT_EVENTS Avast Phishing Landing 2016-06-02 |
rev 1 |
2016-06-02 |
| snort |
ET CURRENT_EVENTS Generic Email Login Phishing Landing 2016-06-02 |
rev 1 |
2016-06-02 |
| snort |
ET CURRENT_EVENTS Successful Excel Shared Document Phish 2016-06-02 |
rev 1 |
2016-06-02 |
| snort |
ET WEB_SERVER Possible CVE-2016-5118 Exploit MVG attempt M2 |
rev 1 |
2016-06-01 |
| snort |
ET WEB_SERVER Possible CVE-2016-5118 Exploit SVG attempt M2 |
rev 1 |
2016-06-01 |
| snort |
ET WEB_SERVER Possible CVE-2016-5118 Exploit SVG attempt M1 |
rev 1 |
2016-06-01 |
| snort |
ET WEB_SERVER Possible CVE-2016-5118 Exploit MVG attempt M1 |
rev 1 |
2016-06-01 |
| snort |
ET TROJAN Ransomware Locky CnC Beacon 4 21 May |
rev 1 |
2016-05-31 |
| snort |
ET TROJAN Joanap CnC Checkin |
rev 2 |
2016-05-27 |
| snort |
ET CURRENT_EVENTS Possible ReactorBot .bin Download |
rev 1 |
2016-05-27 |
| snort |
ET TROJAN Hawkeye Keylogger SMTP Beacon |
rev 2 |
2016-05-26 |
| snort |
ET CURRENT_EVENTS Successful Paypal Phish 2016-05-26 |
rev 1 |
2016-05-26 |
| snort |
ET TROJAN Possible CryptXXX Ransomware Renaming Encrypted File SMB v1 Unicode |
rev 1 |
2016-05-25 |
| snort |
ET TROJAN Possible CryptXXX Ransomware Renaming Encrypted File SMB v1 ASCII |
rev 1 |
2016-05-25 |
| snort |
ET WEB_SERVER Unusually Fast HTTP Requests With Referer Url Matching DoS Tool |
rev 3 |
2016-05-25 |
| snort |
ET CURRENT_EVENTS Successful Citizenbank Phish 2016-05-24 M2 |
rev 1 |
2016-05-24 |
| snort |
ET CURRENT_EVENTS Successful Citizenbank Phish 2016-05-24 M1 |
rev 1 |
2016-05-24 |
| snort |
ET TROJAN Generic gate .php GET with minimal headers |
rev 1 |
2016-05-18 |
| snort |
ET EXPLOIT CVE-2016-1287 Public Exploit ShellCode |
rev 1 |
2016-05-18 |
| snort |
ET CURRENT_EVENTS Mailbox Update Phishing Landing M2 2016-05-16 |
rev 1 |
2016-05-16 |
| snort |
ET CURRENT_EVENTS Mailbox Update Phishing Landing M1 2016-05-16 |
rev 1 |
2016-05-16 |
| snort |
ET POLICY IRC DCC file transfer request on non-std port |
rev 13 |
2016-05-12 |
| snort |
ET CURRENT_EVENTS DRIVEBY Router DNS Changer Apr 07 2015 M2 |
rev 3 |
2016-05-11 |
| snort |
ET INFO Flowbit set for POST to Quicken Updater |
rev 1 |
2016-05-11 |
| snort |
ET CURRENT_EVENTS Successful Gmail Account Update Phish 2016-05-10 |
rev 1 |
2016-05-10 |
| snort |
ET EXPLOIT Possible Internet Explorer VBscript failure to handle error case information disclosure CVE-2014-6332 Common Construct M2 |
rev 1 |
2016-05-06 |
| snort |
ET TROJAN Win32/Upgilf CnC Beacon |
rev 1 |
2016-05-05 |
| snort |
ET TROJAN Backdoor.Darpapox/Jaku Initial C2 Checkin |
rev 1 |
2016-05-04 |
| snort |
ET WEB_SPECIFIC_APPS Magento Shoplift Exploit Inbound |
rev 1 |
2016-05-03 |
| snort |
ET CURRENT_EVENTS Successful Craigslist Phish 2016-04-25 |
rev 1 |
2016-04-28 |
| snort |
ET TROJAN Ransomware Locky CnC Beacon 2 |
rev 1 |
2016-04-27 |
| snort |
ET WORM TheMoon.linksys.router 3 |
rev 3 |
2016-04-25 |
| snort |
ET CURRENT_EVENTS Adobe Online Document Phishing Landing M2 2016-04-25 |
rev 1 |
2016-04-25 |
| snort |
ET TROJAN APT.Fwits CnC Beacon M2 |
rev 1 |
2016-04-25 |
| snort |
ET CURRENT_EVENTS Successful Adobe Online Document Phish 2016-04-25 |
rev 1 |
2016-04-25 |
| snort |
ET EXPLOIT Linksys Router Unauthenticated Remote Code Execution |
rev 1 |
2016-04-25 |
| snort |
ET WORM TheMoon.linksys.router 2 |
rev 4 |
2016-04-25 |
| snort |
ET TROJAN Blackmoon/Banbra Configuration Request |
rev 1 |
2016-04-25 |
| snort |
ET TROJAN APT.Fwits CnC Beacon M1 |
rev 1 |
2016-04-25 |
| snort |
ET POLICY HotSpotShield Activity |
rev 2 |
2016-04-18 |