| snort |
ET TROJAN Possible W32/KanKan Update officeaddinupdate.xml Request |
rev 1 |
2013-10-14 |
| snort |
ET TROJAN Possible W32/KanKan tools.ini Request |
rev 2 |
2013-10-14 |
| snort |
ET TROJAN CryptoLocker EXE Download |
rev 2 |
2013-10-12 |
| snort |
ET WEB_SPECIFIC_APPS Possible JBoss/JMX InvokerServlet RCE Using Marshalled Object |
rev 2 |
2013-10-10 |
| snort |
ET WEB_SPECIFIC_APPS Possible VBulletin Unauthorized Admin Account Creation |
rev 1 |
2013-10-10 |
| snort |
ET WEB_SPECIFIC_APPS Possible JBoss/JMX EJBInvokerServlet RCE Using Marshalled Object |
rev 2 |
2013-10-10 |
| snort |
ET CURRENT_EVENTS DRIVEBY SweetOrange - Java Exploit Downloaded |
rev 4 |
2013-10-07 |
| snort |
ET TROJAN Mevade Checkin |
rev 1 |
2013-10-05 |
| snort |
ET CURRENT_EVENTS Sweet Orange Landing with Applet Oct 4 2013 |
rev 5 |
2013-10-05 |
| snort |
ET POLICY Windows 3.1 User-Agent Detected - Possible Malware or Non-Updated System |
rev 7 |
2013-10-04 |
| snort |
ET WEB_SPECIFIC_APPS AJDating SQL Injection Attempt -- view_profile.php user_id SELECT |
rev 7 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJ Classifieds SQL Injection Attempt -- postingdetails.php postingid SELECT |
rev 7 |
2013-10-03 |
| snort |
ET CURRENT_EVENTS DotkaChef EK initial landing from Oct 02 2013 mass-site compromise EK campaign |
rev 1 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJDating SQL Injection Attempt -- view_profile.php user_id INSERT |
rev 7 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJDating SQL Injection Attempt -- view_profile.php user_id UPDATE |
rev 7 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJ Auction SQL Injection Attempt -- subcat.php cate_id INSERT |
rev 7 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJDating SQL Injection Attempt -- view_profile.php user_id UNION SELECT |
rev 7 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJDating SQL Injection Attempt -- view_profile.php user_id DELETE |
rev 7 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJ Auction SQL Injection Attempt -- subcat.php cate_id UPDATE |
rev 7 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJ Auction SQL Injection Attempt -- subcat.php cate_id DELETE |
rev 7 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJ Auction SQL Injection Attempt -- subcat.php cate_id SELECT |
rev 7 |
2013-10-02 |
| snort |
ET CURRENT_EVENTS LightsOut EK POST Compromise POST |
rev 1 |
2013-09-30 |
| snort |
ET CURRENT_EVENTS Sweet Orange Landing with Applet Sep 30 2013 |
rev 5 |
2013-09-30 |
| snort |
ET CURRENT_EVENTS - Possible Redkit 1-4 char JNLP request |
rev 6 |
2013-09-27 |
| snort |
ET TROJAN Hiloti/Mufanom CnC Response |
rev 2 |
2013-09-26 |
| snort |
ET TROJAN Worm.VBS.ayr Checkin 2 |
rev 2 |
2013-09-25 |
| snort |
ET CURRENT_EVENTS W32/Caphaw DriveBy Campaign Statistic.js |
rev 1 |
2013-09-25 |
| snort |
ET TROJAN Hiloti/Mufanom Downloader Checkin |
rev 8 |
2013-09-25 |
| snort |
ET TROJAN DATA-BROKER BOT Activity |
rev 2 |
2013-09-25 |
| snort |
ET TROJAN W32/Caphaw Requesting Additional Modules From CnC |
rev 4 |
2013-09-24 |
| snort |
ET TROJAN APT.Agtid callback |
rev 1 |
2013-09-24 |
| snort |
ET TROJAN WindowsEnterpriseSuite FakeAV check-in GET |
rev 6 |
2013-09-20 |
| snort |
ET TROJAN Win32/Nitol.B Checkin |
rev 4 |
2013-09-19 |
| snort |
ET TROJAN W32/Downloader.Mevade.FBV CnC Beacon |
rev 1 |
2013-09-19 |
| snort |
ET TROJAN W32/Zzinfor.A Retrieving Instructions From CnC Server |
rev 1 |
2013-09-19 |
| snort |
ET TROJAN ZeroAccess Outbound udp traffic detected |
rev 8 |
2013-09-19 |
| snort |
ET CURRENT_EVENTS DRIVEBY Styx - TDS - Redirect To Landing Page |
rev 2 |
2013-09-18 |
| snort |
ET CURRENT_EVENTS SNET EK Encoded VBS 3 |
rev 1 |
2013-09-17 |
| snort |
ET CURRENT_EVENTS Unknown EK Fake Microsoft Security Update Applet Sep 16 2013 |
rev 1 |
2013-09-17 |
| snort |
ET CURRENT_EVENTS SNET EK Encoded VBS 2 |
rev 1 |
2013-09-17 |