| snort |
ET TROJAN DefendNot Installer Payload Request |
rev 1 |
2026-03-06 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.vinoniv .net domain |
rev 1 |
2026-03-06 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.vinoniv .net domain |
rev 1 |
2026-03-06 |
| snort |
ET TROJAN DefendNot Installer User-Agent Observed |
rev 1 |
2026-03-06 |
| suricata |
ET MALWARE DefendNot Installer User-Agent Observed |
rev 1 |
2026-03-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.vinoniv .net domain |
rev 1 |
2026-03-06 |
| suricata |
ET MALWARE DefendNot Installer Payload Request |
rev 1 |
2026-03-06 |
| suricata |
ET MALWARE DefendNot Installer Script Inbound |
rev 1 |
2026-03-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.vinoniv .net domain |
rev 1 |
2026-03-06 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.littlejaco .com domain |
rev 1 |
2026-03-05 |
| snort |
ET TROJAN Observed TrustConnect Landing Page |
rev 1 |
2026-03-05 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.mongow .com domain |
rev 1 |
2026-03-05 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.mongow .com domain |
rev 1 |
2026-03-05 |
| snort |
ET TROJAN Observed TrustConnect Landing Page |
rev 1 |
2026-03-05 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.littlejaco .com domain |
rev 1 |
2026-03-05 |
| suricata |
ET MALWARE Observed TrustConnect Landing Page |
rev 1 |
2026-03-05 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.littlejaco .com domain |
rev 1 |
2026-03-05 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.mongow .com domain |
rev 1 |
2026-03-05 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.littlejaco .com domain |
rev 1 |
2026-03-05 |
| suricata |
ET MALWARE Observed TrustConnect Landing Page |
rev 1 |
2026-03-05 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.mongow .com domain |
rev 1 |
2026-03-05 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.protelecon .com domain |
rev 1 |
2026-03-04 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.protelecon .com domain |
rev 1 |
2026-03-04 |
| snort |
ET TROJAN TA450 CnC Victim Checkin |
rev 1 |
2026-03-04 |
| snort |
ET TROJAN TA450 CnC Victim Checkin |
rev 1 |
2026-03-04 |
| suricata |
ET MALWARE TA450 CnC Victim Checkin |
rev 1 |
2026-03-04 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.protelecon .com domain |
rev 1 |
2026-03-04 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.protelecon .com domain |
rev 1 |
2026-03-04 |
| suricata |
ET MALWARE TA450 CnC Victim Checkin |
rev 1 |
2026-03-04 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.posambient .com domain |
rev 1 |
2026-03-03 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.posambient .com domain |
rev 1 |
2026-03-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.posambient .com domain |
rev 1 |
2026-03-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.posambient .com domain |
rev 1 |
2026-03-03 |
| snort |
ET INFO SimpleHelp RMM lossyproc Request to Server |
rev 1 |
2026-03-02 |
| snort |
ET INFO SimpleHelp RMM machine ping Request to Server |
rev 1 |
2026-03-02 |
| suricata |
ET REMOTE_ACCESS SimpleHelp RMM machine ping Request to Server |
rev 1 |
2026-03-02 |
| suricata |
ET REMOTE_ACCESS SimpleHelp RMM lossyproc Request to Server |
rev 1 |
2026-03-02 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.383 .li domain |
rev 1 |
2026-03-01 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.383 .li domain |
rev 1 |
2026-03-01 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.383 .li domain |
rev 1 |
2026-03-01 |