| elastic |
Deprecated - CAP_SYS_ADMIN Assigned to Binary |
deprecated |
2026-02-04 |
| elastic |
Deprecated - Potential curl CVE-2023-38545 Exploitation |
deprecated |
2026-02-04 |
| elastic |
Deprecated - Potential Non-Standard Port HTTP/HTTPS connection |
deprecated |
2026-02-04 |
| elastic |
Deprecated - Modification of Standard Authentication Module or Configuration |
deprecated |
2026-02-04 |
| elastic |
Deprecated - Network Connection via Sudo Binary |
deprecated |
2026-02-04 |
| elastic |
Deprecated - Potential Pspy Process Monitoring Detected |
deprecated |
2026-02-04 |
| elastic |
Deprecated - Process Termination followed by Deletion |
deprecated |
2026-02-04 |
| elastic |
Deprecated - Suspicious Renaming of ESXI index.html File |
deprecated |
2026-02-04 |
| elastic |
Deprecated - Potential Non-Standard Port SSH connection |
deprecated |
2026-02-04 |
| elastic |
Deprecated - Potential Successful Linux RDP Brute Force Attack Detected |
deprecated |
2026-02-04 |
| elastic |
Deprecated - Agent Spoofing - Mismatched Agent ID |
deprecated |
2026-02-04 |
| elastic |
Deprecated - Potential Privilege Escalation via UID INT_MAX Bug Detected |
deprecated |
2026-02-04 |
| elastic |
Deprecated - Potential Successful Linux FTP Brute Force Attack Detected |
deprecated |
2026-02-04 |
| elastic |
Deprecated - Potential Protocol Tunneling via Chisel Server |
deprecated |
2026-02-04 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.dinprima .ro domain |
rev 1 |
2026-02-03 |
| snort |
ET TROJAN Observed ClickFix Landing Page |
rev 1 |
2026-02-03 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.dinprima .ro domain |
rev 1 |
2026-02-03 |
| snort |
ET TROJAN Chrysalis Backdoor CnC Checkin |
rev 2 |
2026-02-03 |
| snort |
ET TROJAN PulsarRAT CnC Traffic Observed |
rev 1 |
2026-02-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.dinprima .ro domain |
rev 1 |
2026-02-03 |
| suricata |
ET MALWARE Observed ClickFix Landing Page |
rev 1 |
2026-02-03 |
| suricata |
ET MALWARE PulsarRAT CnC Traffic Observed |
rev 1 |
2026-02-03 |
| suricata |
ET MALWARE Chrysalis Backdoor CnC Checkin |
rev 2 |
2026-02-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.dinprima .ro domain |
rev 1 |
2026-02-03 |
| sigma |
Suspicious Child Process of Notepad++ Updater - GUP.Exe |
experimental |
2026-02-03 |
| sigma |
New Agent Skills Installation Attempt Via Node.EXE |
experimental |
2026-02-03 |
| snort |
ET INFO Moltbook AI Agent Registration Attempt |
rev 1 |
2026-02-02 |
| snort |
ET INFO Moltbook heartbeat.md request |
rev 1 |
2026-02-02 |
| snort |
ET INFO Moltbook skill.json request |
rev 1 |
2026-02-02 |
| snort |
ET INFO Moltbook skill.md request |
rev 1 |
2026-02-02 |
| snort |
ET INFO Moltbook messaging.md request |
rev 1 |
2026-02-02 |
| suricata |
ET INFO Moltbook messaging.md request |
rev 1 |
2026-02-02 |
| suricata |
ET INFO Moltbook skill.json request |
rev 1 |
2026-02-02 |
| suricata |
ET INFO Moltbook heartbeat.md request |
rev 1 |
2026-02-02 |
| suricata |
ET INFO Moltbook skill.md request |
rev 1 |
2026-02-02 |
| suricata |
ET INFO Moltbook AI Agent Registration Attempt |
rev 1 |
2026-02-02 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.lang .hm domain |
rev 1 |
2026-02-01 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.lang .hm domain |
rev 1 |
2026-02-01 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.lang .hm domain |
rev 1 |
2026-02-01 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.lang .hm domain |
rev 1 |
2026-02-01 |