| snort |
ET TROJAN zgRAT / PureLogs CnC Finish Request |
rev 1 |
2026-02-25 |
| snort |
ET TROJAN zgRAT / PureLogs CnC Browser Request |
rev 1 |
2026-02-25 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.unleashedvr .com domain |
rev 1 |
2026-02-24 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.unleashedvr .com domain |
rev 1 |
2026-02-24 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.unleashedvr .com domain |
rev 1 |
2026-02-24 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.unleashedvr .com domain |
rev 1 |
2026-02-24 |
| snort |
ET TROJAN TA450/MuddyWater CnC Victim Checkin |
rev 1 |
2026-02-20 |
| snort |
ET TROJAN MoonRise CnC Commands Inbound via WebSocket |
rev 1 |
2026-02-20 |
| snort |
ET INFO TA450 User-Agent Observed |
rev 1 |
2026-02-20 |
| snort |
ET TROJAN TA450/MuddyWater CnC Victim Checkin |
rev 1 |
2026-02-20 |
| suricata |
ET MALWARE MoonRise CnC Commands Inbound via WebSocket |
rev 1 |
2026-02-20 |
| suricata |
ET MALWARE TA450/MuddyWater CnC Victim Checkin |
rev 1 |
2026-02-20 |
| suricata |
ET MALWARE TA450/MuddyWater CnC Victim Checkin |
rev 1 |
2026-02-20 |
| suricata |
ET HUNTING TA450 User-Agent Observed |
rev 1 |
2026-02-20 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.theharrispad .com domain |
rev 1 |
2026-02-19 |
| snort |
ET TROJAN BlackSanta Payload Inbound |
rev 1 |
2026-02-19 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.fri67 .com domain |
rev 1 |
2026-02-19 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.fri67 .com domain |
rev 1 |
2026-02-19 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.theharrispad .com domain |
rev 1 |
2026-02-19 |
| snort |
ET TROJAN BlackSanta Payload Request |
rev 1 |
2026-02-19 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.theharrispad .com domain |
rev 1 |
2026-02-19 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.theharrispad .com domain |
rev 1 |
2026-02-19 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.fri67 .com domain |
rev 1 |
2026-02-19 |
| suricata |
ET MALWARE BlackSanta Payload Inbound |
rev 1 |
2026-02-19 |
| suricata |
ET MALWARE BlackSanta Payload Request |
rev 1 |
2026-02-19 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.fri67 .com domain |
rev 1 |
2026-02-19 |
| sigma |
OpenEDR Spawning Command Shell |
experimental |
2026-02-19 |
| sigma |
Potentially Suspicious File Creation by OpenEDR's ITSMService |
experimental |
2026-02-19 |
| sigma |
BloodHound Collection Files |
test |
2026-02-19 |
| snort |
ET TROJAN Observed MacOS ClickFix Landing Page |
rev 1 |
2026-02-18 |
| snort |
ET TROJAN Observed MacOS ClickFix Landing Page |
rev 1 |
2026-02-18 |
| snort |
ET TROJAN Observed MacOS ClickFix Landing Page |
rev 1 |
2026-02-18 |
| snort |
ET INFO PowerShell Gallery Search for MSP360 |
rev 1 |
2026-02-18 |
| snort |
ET TROJAN Observed MacOS ClickFix Landing Page |
rev 1 |
2026-02-18 |
| snort |
ET TROJAN Observed MacOS ClickFix Landing Page |
rev 1 |
2026-02-18 |
| snort |
ET TROJAN Observed MacOS ClickFix Landing Page |
rev 1 |
2026-02-18 |
| snort |
ET TROJAN Observed MacOS ClickFix Landing Page |
rev 1 |
2026-02-18 |
| snort |
ET INFO Download MSP360 Package from PowerShell Gallery |
rev 1 |
2026-02-18 |
| snort |
ET TROJAN Observed MacOS ClickFix Landing Page |
rev 1 |
2026-02-18 |
| suricata |
ET MALWARE Observed MacOS ClickFix Landing Page |
rev 1 |
2026-02-18 |