| snort |
ET TROJAN Possible Duqu 2.0 Accessing backdoor over 443 |
rev 1 |
2015-06-10 |
| snort |
ET TROJAN Poweliks Clickfraud CnC M1 |
rev 1 |
2015-06-10 |
| snort |
ET TROJAN Win32/Zacom.A CnC Beacon 1 |
rev 1 |
2015-06-09 |
| snort |
ET TROJAN Sakula/Mivast RAT CnC Beacon 2 |
rev 1 |
2015-06-08 |
| snort |
ET TROJAN Sakula/Mivast RAT CnC Beacon 1 |
rev 4 |
2015-06-08 |
| snort |
ET TROJAN Sakula/Mivast RAT CnC Beacon 3 |
rev 1 |
2015-06-08 |
| snort |
ET TROJAN IOS.Oneclickfraud HTTP Host |
rev 1 |
2015-06-05 |
| snort |
ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Wroba.m Checkin |
rev 1 |
2015-06-05 |
| snort |
ET TROJAN KeyBase Keylogger Checkin |
rev 3 |
2015-06-05 |
| snort |
ET TROJAN Databack CnC |
rev 2 |
2015-06-05 |
| snort |
ET TROJAN Linux/Moose HTTP CnC Beacon |
rev 2 |
2015-05-27 |
| snort |
ET TROJAN Possible Linux/Moose Telnet CnC Beacon |
rev 1 |
2015-05-26 |
| snort |
ET TROJAN Linux/Moose NAT Traversal CnC Beacon set |
rev 1 |
2015-05-26 |
| snort |
ET TROJAN H1N1 Loader CnC Beacon M2 |
rev 1 |
2015-05-22 |
| snort |
ET TROJAN H1N1 Loader CnC Beacon M1 |
rev 1 |
2015-05-22 |
| snort |
ET TROJAN Suspicious X-mailer Synapse Inbound to SMTP Server |
rev 1 |
2015-05-21 |
| snort |
ET TROJAN JavaScriptBackdoor HTTP GET CnC Beacon |
rev 1 |
2015-05-21 |
| snort |
ET TROJAN Worm.VBS.Jenxcus.H User Agent |
rev 1 |
2015-05-20 |
| snort |
ET TROJAN Possible APT17 CnC Content in Public Website |
rev 1 |
2015-05-19 |
| snort |
ET TROJAN Yahoyah CnC Beacon |
rev 1 |
2015-05-18 |
| snort |
ET CURRENT_EVENTS DNSChanger EK Secondary Landing May 12 2015 M2 |
rev 1 |
2015-05-16 |
| snort |
ET TROJAN FrauDrop UA single |
rev 1 |
2015-05-15 |
| snort |
ET TROJAN Generic Dropper Installing PUP 1 |
rev 1 |
2015-05-15 |
| snort |
ET TROJAN APT Hellsing Proxy Checker Checkin |
rev 1 |
2015-05-15 |
| snort |
ET TROJAN FrauDrop UA LETITGO |
rev 1 |
2015-05-15 |
| snort |
ET WEB_CLIENT SUSPICIOUS Possible Office Doc with Embedded VBA Project |
rev 2 |
2015-05-12 |
| snort |
ET WEB_CLIENT SUSPICIOUS Possible Office Doc with Embedded VBA Project |
rev 2 |
2015-05-12 |
| snort |
ET TROJAN Possible CryptoPHP Leaking Credentials May 8 2015 M2 |
rev 1 |
2015-05-09 |
| snort |
ET TROJAN Possible CryptoPHP Leaking Credentials May 8 2015 M1 |
rev 1 |
2015-05-09 |
| snort |
ET TROJAN Possible CryptoPHP Leaking Credentials May 8 2015 M3 |
rev 1 |
2015-05-09 |
| snort |
ET WEB_CLIENT Possible CVE-2013-1710/CVE-2012-3993 Firefox Exploit Attempt |
rev 1 |
2015-05-08 |
| snort |
ET CURRENT_EVENTS Likely Trojan Multi-part Macro Download M1 |
rev 3 |
2015-05-08 |
| snort |
ET INFO SUSPICIOUS Dotted Quad Host MZ Response |
rev 1 |
2015-05-08 |
| snort |
ET VOIP Possible Misuse Call from Cisco ooh323 |
rev 1 |
2015-05-07 |
| snort |
ET WEB_SPECIFIC_APPS WP Jetpack/Twentyfifteen Possible XSS Request |
rev 1 |
2015-05-07 |
| snort |
ET TROJAN njRAT Variant Outbound CnC Beacon |
rev 1 |
2015-05-05 |
| snort |
ET SCAN Xenu Link Sleuth Scanner Outbound |
rev 1 |
2015-05-05 |
| snort |
ET CURRENT_EVENTS Fiesta EK SilverLight Exploit Apr 23 2015 |
rev 2 |
2015-05-04 |
| snort |
ET TROJAN Linux.Trojan.IptabLex Variant Checkin |
rev 1 |
2015-05-04 |
| snort |
ET TROJAN Linux.Mumblehard Spam Command CnC |
rev 1 |
2015-05-04 |