| snort |
ET INFO DYNAMIC_DNS Query to a *.null-t .org domain |
rev 1 |
2026-02-07 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.manica .org domain |
rev 1 |
2026-02-07 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.manica .org domain |
rev 1 |
2026-02-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.null-t .org domain |
rev 1 |
2026-02-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.null-t .org domain |
rev 1 |
2026-02-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.manica .org domain |
rev 1 |
2026-02-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.manica .org domain |
rev 1 |
2026-02-07 |
| snort |
ET TROJAN Marco Stealer Data Exfiltration Attempt |
rev 1 |
2026-02-06 |
| suricata |
ET MALWARE Marco Stealer Data Exfiltration Attempt |
rev 1 |
2026-02-06 |
| snort |
ET CURRENT_EVENTS Generic Crypto Phish Landing Page M1 2026-02-05 |
rev 1 |
2026-02-05 |
| snort |
ET CURRENT_EVENTS CoGUI Response Page 2026-02-04 |
rev 1 |
2026-02-05 |
| snort |
ET TROJAN DesckVB RAT BlugPass Checkin - Webcam Enumeration |
rev 1 |
2026-02-05 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.rinet .ai domain |
rev 1 |
2026-02-05 |
| snort |
ET TROJAN DesckVB RAT D ping request/response |
rev 1 |
2026-02-05 |
| snort |
ET TROJAN DesckVB RAT BlugPass Checkin |
rev 1 |
2026-02-05 |
| snort |
ET CURRENT_EVENTS Successful Generic Crypto Phish Exfil M2 2026-02-05 |
rev 1 |
2026-02-05 |
| snort |
ET CURRENT_EVENTS CoGUI 404 Response 2026-02-04 |
rev 1 |
2026-02-05 |
| snort |
ET TROJAN DesckVB RAT CnC Checkin |
rev 1 |
2026-02-05 |
| snort |
ET TROJAN DesckVB RAT DetectaAV Checkin |
rev 1 |
2026-02-05 |
| snort |
ET TROJAN DesckVB RAT Ping Checkin |
rev 1 |
2026-02-05 |
| snort |
ET CURRENT_EVENTS Successful Generic Crypto Phish Exfil M1 2026-02-05 |
rev 1 |
2026-02-05 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.rinet .ai domain |
rev 1 |
2026-02-05 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.rinet .ai domain |
rev 1 |
2026-02-05 |
| suricata |
ET MALWARE DesckVB RAT DetectaAV Checkin |
rev 1 |
2026-02-05 |
| suricata |
ET PHISHING CoGUI Response Page 2026-02-04 |
rev 1 |
2026-02-05 |
| suricata |
ET PHISHING CoGUI 404 Response 2026-02-04 |
rev 1 |
2026-02-05 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.rinet .ai domain |
rev 1 |
2026-02-05 |
| suricata |
ET MALWARE DesckVB RAT Ping Checkin |
rev 1 |
2026-02-05 |
| suricata |
ET MALWARE DesckVB RAT BlugPass Checkin |
rev 1 |
2026-02-05 |
| suricata |
ET PHISHING Successful Generic Crypto Phish Exfil M2 2026-02-05 |
rev 1 |
2026-02-05 |
| suricata |
ET MALWARE DesckVB RAT CnC Checkin |
rev 1 |
2026-02-05 |
| suricata |
ET MALWARE DesckVB RAT BlugPass Checkin - Webcam Enumeration |
rev 1 |
2026-02-05 |
| suricata |
ET PHISHING Generic Crypto Phish Landing Page M2 2026-02-05 |
rev 1 |
2026-02-05 |
| suricata |
ET PHISHING Generic Crypto Phish Landing Page M1 2026-02-05 |
rev 1 |
2026-02-05 |
| suricata |
ET PHISHING Successful Generic Crypto Phish Exfil M1 2026-02-05 |
rev 1 |
2026-02-05 |
| suricata |
ET MALWARE DesckVB RAT D ping request/response |
rev 1 |
2026-02-05 |
| elastic |
Deprecated - Creation of Kernel Module |
deprecated |
2026-02-04 |
| elastic |
Deprecated - SSH Process Launched From Inside A Container via Elastic Defend |
deprecated |
2026-02-04 |
| elastic |
Deprecated - CAP_SYS_ADMIN Assigned to Binary |
deprecated |
2026-02-04 |
| elastic |
Deprecated - LaunchDaemon Creation or Modification and Immediate Loading |
deprecated |
2026-02-04 |