| snort |
ET INFO UPnP Discovery Search Response - CVE-2012-5958 and CVE-2012-5959 Vulnerable UPnP device M1 |
rev 6 |
2023-05-02 |
| snort |
ET INFO Adilbo HTML Encoder Observed |
rev 4 |
2023-05-02 |
| snort |
ET MOBILE_MALWARE Trojan-Ransom.AndroidOS.CryCrypt.c Checkin |
rev 1 |
2023-05-02 |
| snort |
ET ATTACK_RESPONSE Mystic Stealer Admin Panel Inbound |
rev 1 |
2023-05-02 |
| snort |
ET INFO NoxPlayer Simulator Update Activity |
rev 3 |
2023-05-02 |
| snort |
ET INFO [eSentire] Possible Kali Linux Updates |
rev 5 |
2023-05-02 |
| snort |
ET INFO Control Panel Applet File Download |
rev 3 |
2023-05-02 |
| snort |
ET INFO UPnP Discovery Search Response - CVE-2012-5958 and CVE-2012-5959 Vulnerable UPnP device M2 |
rev 5 |
2023-05-02 |
| snort |
ET INFO Suspicious Empty Accept-Encoding Header |
rev 2 |
2023-05-02 |
| snort |
ET INFO Office User-Agent Requesting Non-Standard Filename |
rev 1 |
2023-05-02 |
| snort |
ET TROJAN DarkCloud Stealer Key Logger Function Exfiltrating Data via Telegram |
rev 1 |
2023-05-02 |
| suricata |
ET ATTACK_RESPONSE reNgine Recon Panel Inbound |
rev 1 |
2023-05-02 |
| suricata |
ET INFO [eSentire] Possible Kali Linux Updates |
rev 5 |
2023-05-02 |
| suricata |
ET INFO UPnP Discovery Search Response - CVE-2012-5958 and CVE-2012-5959 Vulnerable UPnP device M1 |
rev 7 |
2023-05-02 |
| suricata |
ET ATTACK_RESPONSE Mystic Stealer Admin Panel Inbound |
rev 1 |
2023-05-02 |
| suricata |
ET PHISHING W3LL STORE Phish Kit Landing Page 2023-05-02 |
rev 1 |
2023-05-02 |
| suricata |
ET INFO UPnP Discovery Search Response - CVE-2012-5958 and CVE-2012-5959 Vulnerable UPnP device M2 |
rev 5 |
2023-05-02 |
| sigma |
Potential COLDSTEEL Persistence Service DLL Load |
test |
2023-05-02 |
| sigma |
Ps.exe Renamed SysInternals Tool |
test |
2023-05-02 |
| sigma |
Suspicious Curl File Upload - Linux |
test |
2023-05-02 |
| sigma |
COLDSTEEL Persistence Service Creation |
test |
2023-05-02 |
| sigma |
Potential Data Exfiltration Via Curl.EXE |
test |
2023-05-02 |
| snort |
ET TROJAN Havoc Framework Header in HTTP Response |
rev 1 |
2023-05-01 |
| snort |
ET MALWARE Suspicious Darkwave Popads Pop Under Redirect |
rev 3 |
2023-05-01 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page from Text Scam M3 2023-05-01 |
rev 1 |
2023-05-01 |
| snort |
ET INFO Android Device Connectivity Check |
rev 3 |
2023-05-01 |
| snort |
ET TROJAN Gamut Spambot Checkin Response |
rev 2 |
2023-05-01 |
| snort |
ET INFO HTTP POST contains pasa form |
rev 2 |
2023-05-01 |
| snort |
ET INFO Observed HTTP Request to *.pythonanywhere .com Domain |
rev 4 |
2023-05-01 |
| snort |
ET INFO HTTP Request to transfer .sh via Powershell |
rev 1 |
2023-05-01 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page from Text Scam M1 2023-05-01 |
rev 1 |
2023-05-01 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page from Text Scam M2 2023-05-01 |
rev 1 |
2023-05-01 |
| snort |
ET TROJAN CMDASP Webshell Command Request |
rev 1 |
2023-05-01 |
| snort |
ET TROJAN Gamut Spambot Checkin |
rev 4 |
2023-05-01 |
| snort |
ET INFO .exe File requested over FTP |
rev 2 |
2023-05-01 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page from Text Scam M4 2023-05-01 |
rev 1 |
2023-05-01 |
| suricata |
ET INFO HTTP POST contains pasa form |
rev 4 |
2023-05-01 |
| suricata |
ET HUNTING HTTP Request to transfer .sh via Powershell |
rev 1 |
2023-05-01 |
| suricata |
ET INFO Observed HTTP Request to *.pythonanywhere .com Domain |
rev 2 |
2023-05-01 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page from Text Scam M3 2023-05-01 |
rev 1 |
2023-05-01 |