| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.383 .li domain |
rev 1 |
2026-03-01 |
| sigma |
Mail Forwarding/Redirecting Activity Via ExchangePowerShell Cmdlet |
experimental |
2026-03-01 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.garethmusic .com domain |
rev 1 |
2026-02-28 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.garethmusic .com domain |
rev 1 |
2026-02-28 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.acconboy .com domain |
rev 1 |
2026-02-28 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.acconboy .com domain |
rev 1 |
2026-02-28 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.acconboy .com domain |
rev 1 |
2026-02-28 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.garethmusic .com domain |
rev 1 |
2026-02-28 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.garethmusic .com domain |
rev 1 |
2026-02-28 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.acconboy .com domain |
rev 1 |
2026-02-28 |
| snort |
ET TROJAN Observed ClickFix Landing Page |
rev 1 |
2026-02-27 |
| snort |
ET TROJAN Observed ClickFix Landing Page |
rev 1 |
2026-02-27 |
| snort |
ET TROJAN Observed ClickFix Landing Page |
rev 1 |
2026-02-27 |
| snort |
ET TROJAN Observed ClickFix Landing Page |
rev 1 |
2026-02-27 |
| snort |
ET TROJAN Observed TrustConnect RAT Landing Page |
rev 1 |
2026-02-27 |
| suricata |
ET MALWARE Observed TrustConnect RAT Landing Page |
rev 1 |
2026-02-27 |
| suricata |
ET MALWARE Observed ClickFix Landing Page |
rev 1 |
2026-02-27 |
| suricata |
ET MALWARE Observed ClickFix Landing Page |
rev 1 |
2026-02-27 |
| suricata |
ET MALWARE Observed ClickFix Landing Page |
rev 1 |
2026-02-27 |
| suricata |
ET MALWARE Observed ClickFix Landing Page |
rev 1 |
2026-02-27 |
| suricata |
ET MALWARE zgRAT / PureLogs CnC Ping Request |
rev 2 |
2026-02-26 |
| snort |
ET TROJAN zgRAT / PureLogs CnC Ping Request |
rev 2 |
2026-02-26 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.imatic .gr domain |
rev 1 |
2026-02-26 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.imatic .gr domain |
rev 1 |
2026-02-26 |
| snort |
ET INFO Pagekite Tunneling Service ping Heartbeat Response |
rev 1 |
2026-02-26 |
| snort |
ET INFO Pagekite Tunneling Service ping Heartbeat |
rev 1 |
2026-02-26 |
| suricata |
ET INFO Pagekite Tunneling Service ping Heartbeat |
rev 1 |
2026-02-26 |
| suricata |
ET INFO Pagekite Tunneling Service ping Heartbeat Response |
rev 1 |
2026-02-26 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.imatic .gr domain |
rev 1 |
2026-02-26 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.imatic .gr domain |
rev 1 |
2026-02-26 |
| suricata |
ET MALWARE zgRAT / PureLogs CnC Filesearch Request |
rev 1 |
2026-02-25 |
| suricata |
ET MALWARE zgRAT / PureLogs CnC Finish Request |
rev 1 |
2026-02-25 |
| suricata |
ET MALWARE zgRAT / PureLogs CnC Browser Request |
rev 1 |
2026-02-25 |
| suricata |
ET MALWARE zgRAT / PureLogs CnC Userinfo Request |
rev 1 |
2026-02-25 |
| suricata |
ET MALWARE zgRAT / PureLogs CnC Discord Request |
rev 1 |
2026-02-25 |
| suricata |
ET MALWARE zgRAT / PureLogs CnC Plugin Request |
rev 1 |
2026-02-25 |
| snort |
ET TROJAN zgRAT / PureLogs CnC Browser Request |
rev 1 |
2026-02-25 |
| snort |
ET TROJAN zgRAT / PureLogs CnC Discord Request |
rev 1 |
2026-02-25 |
| snort |
ET TROJAN zgRAT / PureLogs CnC Plugin Request |
rev 1 |
2026-02-25 |
| snort |
ET TROJAN zgRAT / PureLogs CnC Userinfo Request |
rev 1 |
2026-02-25 |