| snort |
ET TROJAN Win32/Neshta.A Posting Data |
rev 2 |
2015-10-07 |
| snort |
ET TROJAN StartPage Userclass HTTP Request |
rev 1 |
2015-10-07 |
| snort |
ET CURRENT_EVENTS KaiXin Landing Page Oct 05 2015 |
rev 2 |
2015-10-06 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish 2015-10-03 |
rev 1 |
2015-10-03 |
| snort |
ET TROJAN Java/QRat Retrieving PE |
rev 1 |
2015-10-02 |
| snort |
ET CURRENT_EVENTS Successful Bank of America Phish 2015-10-02 |
rev 1 |
2015-10-02 |
| snort |
ET CURRENT_EVENTS Successful Mailbox Update Credential Phish 2015-10-02 |
rev 1 |
2015-10-02 |
| snort |
ET POLICY Hola VPN Activity - X-Hola-* Headers |
rev 1 |
2015-10-02 |
| snort |
ET CURRENT_EVENTS Successful Phish Gmail Recovery Information 2015-10-01 |
rev 1 |
2015-10-01 |
| snort |
ET WEB_CLIENT Phishing Fake Document Loading Error 2015-10-01 |
rev 1 |
2015-10-01 |
| snort |
ET CURRENT_EVENTS Evil JavaScript Injection Sep 29 2015 |
rev 1 |
2015-09-30 |
| snort |
ET TROJAN Ransomware Win32/WinPlock.A Successfully Installed CnC Beacon |
rev 2 |
2015-09-30 |
| snort |
ET TROJAN Ransomware Win32/WinPlock.A CnC Beacon 3 |
rev 3 |
2015-09-30 |
| snort |
ET TROJAN Ransomware Win32/WinPlock.A CnC Beacon 2 |
rev 3 |
2015-09-30 |
| snort |
ET CURRENT_EVENTS Evil Redirector Leading To EK Sep 30 2015 |
rev 1 |
2015-09-30 |
| snort |
ET CURRENT_EVENTS Evil Redirector Sep 29 2015 |
rev 1 |
2015-09-30 |
| snort |
ET MOBILE_MALWARE Android/Koler.C Checkin |
rev 5 |
2015-09-30 |
| snort |
ET TROJAN W32/DirCrypt.Ransomware CnC Checkin |
rev 5 |
2015-09-29 |
| snort |
ET TROJAN XcodeGhost CnC M2 |
rev 1 |
2015-09-25 |
| snort |
ET TROJAN Ursnif Variant CnC Data Exfil |
rev 2 |
2015-09-24 |
| snort |
ET TROJAN Possible Trojan.APT.9002 POST |
rev 3 |
2015-09-24 |
| snort |
ET TROJAN Ursnif Variant CnC Beacon 3 |
rev 1 |
2015-09-23 |
| snort |
ET TROJAN XcodeGhost CnC Checkin |
rev 1 |
2015-09-23 |
| snort |
ET CURRENT_EVENTS Successful Amazon Phish 2015-09-22 |
rev 1 |
2015-09-22 |
| snort |
ET CURRENT_EVENTS Successful Battle.net Phish 2015-09-22 |
rev 1 |
2015-09-22 |
| snort |
ET TROJAN Win32/Spy.Odlanor CnC Checkin |
rev 1 |
2015-09-18 |
| snort |
ET CURRENT_EVENTS Possible Spartan/Nuclear EK Payload |
rev 2 |
2015-09-18 |
| snort |
ET TROJAN CosmicDuke Exfiltrating Data via FTP STOR |
rev 2 |
2015-09-18 |
| snort |
ET TROJAN PlugX UDP CnC Beacon |
rev 1 |
2015-09-17 |
| snort |
ET TROJAN Possible Passthru/Kshell Port Redirection Initiation |
rev 1 |
2015-09-17 |
| snort |
ET CURRENT_EVENTS Successful LinkedIn Phish 2015-09-17 |
rev 1 |
2015-09-16 |
| snort |
ET WEB_SERVER Cisco IOS HTTP Server Exec Command Execution Attempt |
rev 5 |
2015-09-16 |
| snort |
ET CURRENT_EVENTS Unknown Malicious Second Stage Download URI Struct Sept 15 2015 |
rev 1 |
2015-09-16 |
| snort |
ET CURRENT_EVENTS Successful ViewDocsOnline Phish 2015-09-15 |
rev 1 |
2015-09-15 |
| snort |
ET TROJAN PE EXE or DLL Windows file download Text |
rev 1 |
2015-09-15 |
| snort |
ET EXPLOIT Possible Android Stagefright MP4 CVE-2015-1538 - ROP |
rev 1 |
2015-09-10 |
| snort |
ET EXPLOIT Possible Android Stagefright MP4 CVE-2015-1538 - Shell |
rev 1 |
2015-09-10 |
| snort |
ET CURRENT_EVENTS Fake Webmail Account Phishing Landing 2015-09-10 |
rev 1 |
2015-09-10 |
| snort |
ET CURRENT_EVENTS Google Drive Phishing Landing Sept 3 |
rev 2 |
2015-09-09 |
| snort |
ET TROJAN Cobalt Strike Beacon Observed |
rev 1 |
2015-09-09 |