| suricata |
ET HUNTING Fake Github .com Html Footer |
rev 1 |
2026-02-13 |
| suricata |
ET MALWARE Observed MacOS ClickFix Landing Page |
rev 1 |
2026-02-13 |
| suricata |
ET MALWARE Observed MacOS ClickFix Landing Page |
rev 1 |
2026-02-13 |
| suricata |
ET MALWARE SHubv2.0 CnC Heartbeat |
rev 1 |
2026-02-13 |
| suricata |
ET MALWARE Observed MacOS ClickFix Landing Page |
rev 1 |
2026-02-13 |
| suricata |
ET MALWARE Observed MacOS ClickFix Landing Page |
rev 1 |
2026-02-13 |
| suricata |
ET MALWARE MacSync Stage 2 CnC Exfil |
rev 1 |
2026-02-13 |
| suricata |
ET MALWARE MacSync Stage 1 Payload Request |
rev 1 |
2026-02-13 |
| suricata |
ET MALWARE Observed MacOS ClickFix Landing Page |
rev 1 |
2026-02-13 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.rocketpride .com domain |
rev 1 |
2026-02-12 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.rocketpride .com domain |
rev 1 |
2026-02-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.rocketpride .com domain |
rev 1 |
2026-02-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.rocketpride .com domain |
rev 1 |
2026-02-12 |
| snort |
ET TROJAN upStage Residential Proxy CnC Checkin |
rev 1 |
2026-02-11 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.it-como-hobby .com domain |
rev 1 |
2026-02-11 |
| snort |
ET TROJAN upStage Residential Proxy CnC Response |
rev 1 |
2026-02-11 |
| snort |
ET TROJAN upStage Proxy Heartbeat |
rev 1 |
2026-02-11 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.it-como-hobby .com domain |
rev 1 |
2026-02-11 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.it-como-hobby .com domain |
rev 1 |
2026-02-11 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.it-como-hobby .com domain |
rev 1 |
2026-02-11 |
| suricata |
ET MALWARE upStage Residential Proxy CnC Response |
rev 1 |
2026-02-11 |
| suricata |
ET MALWARE upStage Residential Proxy CnC Checkin |
rev 1 |
2026-02-11 |
| suricata |
ET MALWARE upStage Proxy Heartbeat |
rev 1 |
2026-02-11 |
| sigma |
Suspicious Child Process of SolarWinds WebHelpDesk |
experimental |
2026-02-11 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.parcomunica .com domain |
rev 1 |
2026-02-10 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.parcomunica .com domain |
rev 1 |
2026-02-10 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.parcomunica .com domain |
rev 1 |
2026-02-10 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.parcomunica .com domain |
rev 1 |
2026-02-10 |
| sigma |
Inbox Rules Creation Or Update Activity Via ExchangePowerShell Cmdlet |
experimental |
2026-02-10 |
| snort |
ET INFO Quest KACE Desktop Authority Server SMB Named Pipe Create |
rev 1 |
2026-02-09 |
| suricata |
ET INFO Quest KACE Desktop Authority Server SMB Named Pipe Create |
rev 1 |
2026-02-09 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.infotechnology .com domain |
rev 1 |
2026-02-08 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.thepresenttraveller .com domain |
rev 1 |
2026-02-08 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.thepresenttraveller .com domain |
rev 1 |
2026-02-08 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.infotechnology .com domain |
rev 1 |
2026-02-08 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.thepresenttraveller .com domain |
rev 1 |
2026-02-08 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.infotechnology .com domain |
rev 1 |
2026-02-08 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.thepresenttraveller .com domain |
rev 1 |
2026-02-08 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.infotechnology .com domain |
rev 1 |
2026-02-08 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.null-t .org domain |
rev 1 |
2026-02-07 |