| snort |
ET TROJAN Red October/Win32.Digitalia Checkin cgi-bin/win/cab |
rev 2 |
2013-02-07 |
| snort |
ET TROJAN Red October/Win32.Digitalia Checkin cgi-bin/nt/th |
rev 2 |
2013-02-07 |
| snort |
ET INFO JAVA - ClassID |
rev 1 |
2013-02-07 |
| snort |
ET TROJAN Red October/Win32.Digitalia Checkin cgi-bin/win/wcx |
rev 2 |
2013-02-07 |
| snort |
ET TROJAN W32/StartPage.eba Dropper Checkin |
rev 2 |
2013-02-07 |
| snort |
ET INFO JAVA - ClassID |
rev 1 |
2013-02-07 |
| snort |
ET CURRENT_EVENTS CritXPack - Landing Page - Received |
rev 1 |
2013-02-07 |
| snort |
ET TROJAN Red October/Win32.Digitalia Checkin cgi-bin/ms/flush |
rev 2 |
2013-02-07 |
| snort |
ET MOBILE_MALWARE Android TrojanFakeLookout.A |
rev 2 |
2013-02-06 |
| snort |
ET TROJAN W32/ServStart.Variant CnC Beacon |
rev 1 |
2013-02-05 |
| snort |
ET TROJAN Red October/Win32.Digitalia Checkin cgi-bin/nt/sk |
rev 2 |
2013-02-05 |
| snort |
ET TROJAN Red October/Win32.Digitalia Checkin cgi-bin/dllhost/ac |
rev 5 |
2013-02-05 |
| snort |
ET TROJAN W32/Beebus HTTP POST CnC Beacon |
rev 1 |
2013-02-05 |
| snort |
ET CURRENT_EVENTS Styx Exploit Kit Jerk.cgi TDS |
rev 1 |
2013-02-05 |
| snort |
ET CURRENT_EVENTS CritXPack Landing Pattern |
rev 2 |
2013-02-05 |
| snort |
ET CURRENT_EVENTS JDB Exploit Kit JAR Download |
rev 4 |
2013-02-04 |
| snort |
ET WEB_SPECIFIC_APPS OSClass id parameter data access Attempt 1 |
rev 1 |
2013-02-01 |
| snort |
ET WEB_SPECIFIC_APPS CMSQLITE mediaAdmin.php file Local File Inclusion Attempt |
rev 1 |
2013-02-01 |
| snort |
ET TROJAN ZeuS Post to C&C footer.php |
rev 1 |
2013-02-01 |
| snort |
ET WEB_SPECIFIC_APPS OSClass id parameter data access Attempt 2 |
rev 1 |
2013-02-01 |
| snort |
ET TROJAN W32/Jabberbot.A Trednet XMPP CnC Beacon |
rev 1 |
2013-02-01 |
| snort |
ET CURRENT_EVENTS JDB Exploit Kit Fake Adobe Download |
rev 4 |
2013-01-30 |
| snort |
ET CURRENT_EVENTS Possible JDB Exploit Kit Class Request |
rev 5 |
2013-01-30 |
| snort |
ET TROJAN W32/DownloaderAgent.fajk Second Stage Download List Requested |
rev 1 |
2013-01-30 |
| snort |
ET TROJAN Linux/SSHDoor.A Reporting Backdoor CnC Beacon |
rev 1 |
2013-01-30 |
| snort |
ET CURRENT_EVENTS JDB Exploit Kit Landing Page |
rev 3 |
2013-01-30 |
| snort |
ET WEB_SERVER Non-Standard HTML page in Joomla /com_content/ dir |
rev 6 |
2013-01-30 |
| snort |
ET TROJAN W32/DownloaderAgent.fajk Successful Infection CnC Beacon |
rev 1 |
2013-01-30 |
| snort |
ET WEB_SPECIFIC_APPS Joomla com_collector Component Arbitrary File Upload Vulnerability |
rev 2 |
2013-01-25 |
| snort |
ET ACTIVEX Possible Aloaha PDF Crypter activex SaveToFile method arbitrary file overwrite |
rev 2 |
2013-01-25 |
| snort |
ET WEB_SPECIFIC_APPS GetSimple CMS path parameter Local File Inclusion Attempt |
rev 1 |
2013-01-25 |
| snort |
ET CURRENT_EVENTS TDS - in.php |
rev 1 |
2013-01-25 |
| snort |
ET TROJAN W32/Bilakip.A Downloader API Ping CnC Beacon |
rev 1 |
2013-01-25 |
| snort |
ET TROJAN W32/Bilakip.A Downloader Viruslist Download For Populating FakeAV |
rev 1 |
2013-01-25 |
| snort |
ET WEB_SPECIFIC_APPS Banana Dance name Parameter Local File Inclusion Attempt |
rev 1 |
2013-01-25 |
| snort |
ET WEB_SPECIFIC_APPS CubeCart loc parameter Local File Inclusion Attempt |
rev 1 |
2013-01-25 |
| snort |
ET USER_AGENTS Suspicious Win32 User Agent |
rev 2 |
2013-01-24 |
| snort |
ET CURRENT_EVENTS Gondad Exploit Kit Post Exploitation Request |
rev 1 |
2013-01-24 |
| snort |
ET CURRENT_EVENTS Possible Red Dot Exploit Kit Single Character JAR Request |
rev 1 |
2013-01-24 |
| snort |
ET WEB_SERVER WebShell - Symlink_Sa |
rev 1 |
2013-01-22 |