| snort |
ET CURRENT_EVENTS Unknown EK Fake Microsoft Security Update Applet Sep 16 2013 |
rev 1 |
2013-09-17 |
| snort |
ET TROJAN W32/Hesperus.Banker Tr-mail Variant Sending Data To CnC |
rev 1 |
2013-09-16 |
| snort |
ET MOBILE_MALWARE Android/FakeAhnAV.A CnC Beacon |
rev 1 |
2013-09-16 |
| snort |
ET TROJAN ZeroAccess P2P Module v6 Reporting |
rev 1 |
2013-09-13 |
| snort |
ET TROJAN Waledac FACEPUNCH Traffic Detected |
rev 5 |
2013-09-11 |
| snort |
ET WEB_SERVER PHP REQUEST SuperGlobal in URI |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP ENV SuperGlobal in URI |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP COOKIE SuperGlobal in POST |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP SESSION SuperGlobal in POST |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP GET SuperGlobal in URI |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP SERVER SuperGlobal in URI |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP REQUEST SuperGlobal in POST |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP COOKIE SuperGlobal in URI |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP ENV SuperGlobal in POST |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP SESSION SuperGlobal in URI |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP POST SuperGlobal in URI |
rev 1 |
2013-09-10 |
| snort |
ET TROJAN Bladabindi/njrat CnC Checkin |
rev 2 |
2013-09-05 |
| snort |
ET CURRENT_EVENTS Sakura Landing with Applet Aug 30 2013 |
rev 1 |
2013-09-03 |
| snort |
ET WEB_SERVER WebShell Generic eval of base64_decode |
rev 6 |
2013-08-31 |
| snort |
ET WEB_SERVER WebShell Generic eval of convert_uudecode |
rev 6 |
2013-08-31 |
| snort |
ET WEB_SERVER WebShell Generic eval of gzinflate |
rev 6 |
2013-08-31 |
| snort |
ET WEB_SERVER WebShell Generic eval of str_rot13 |
rev 6 |
2013-08-31 |
| snort |
ET WEB_SERVER WebShell Generic eval of gzuncompress |
rev 6 |
2013-08-31 |
| snort |
ET WORM W32/Njw0rm CnC Beacon |
rev 3 |
2013-08-31 |
| snort |
ET P2P eMule KAD Network Connection Request |
rev 5 |
2013-08-30 |
| snort |
ET WEB_SERVER WebShell - ASPyder - File Browser - POST Structure |
rev 1 |
2013-08-28 |
| snort |
ET WEB_SERVER WebShell - ASPyder - Auth Prompt |
rev 1 |
2013-08-28 |
| snort |
ET WEB_SERVER WebShell - ASPyder -File Upload - POST Structure |
rev 1 |
2013-08-28 |
| snort |
ET WEB_SERVER WebShell - ASPyder - File Browser - Interface |
rev 2 |
2013-08-28 |
| snort |
ET TROJAN Possible APT-12 Related C2 |
rev 1 |
2013-08-28 |
| snort |
ET WEB_SERVER WebShell - ASPyder - File Upload - Response |
rev 1 |
2013-08-28 |
| snort |
ET TROJAN Bitcoin variant Checkin |
rev 1 |
2013-08-23 |
| snort |
ET TROJAN Mashigoom/Tranwos/RevProxy ClickFraud - hello |
rev 6 |
2013-08-22 |
| snort |
ET TROJAN Possible Win32/Napolar.A URL Response |
rev 1 |
2013-08-22 |
| snort |
ET TROJAN Trojan Related Lame Updater User-Agent |
rev 3 |
2013-08-21 |
| snort |
ET TROJAN Win32.Troj.Cidox Checkin |
rev 2 |
2013-08-21 |
| snort |
ET INFO InetSim Response from External Source Possible SinkHole |
rev 1 |
2013-08-21 |
| snort |
ET TROJAN Trojan.APT.9002 CnC Traffic |
rev 8 |
2013-08-20 |
| snort |
ET TROJAN Proxychecker Lookup |
rev 2 |
2013-08-20 |
| snort |
ET TROJAN Optix Pro Trojan/Keylogger Reporting Installation via Email |
rev 5 |
2013-08-19 |