| snort |
ET TROJAN SoulSearcher Checkin M2 |
rev 4 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M10 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Win32/Vidar Variant/Mars Stealer Resources Download |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN DarkCrystal Rat Stealer Data Exfiltration Activity |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Win32/RecordBreaker CnC Checkin - Server Response M2 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS Successful Telstra Credential Phish 2022-08-26 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M1 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS Successful Navy Federal Phish 2022-10-11 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS [TW] Robin Banks Redirect M2 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN DCRat Initial Checkin Server Response M5 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN APT-Q-37/Manling Flower Payload - CnC Checkin |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Win32/RisePro CnC Server Response M1 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN CopperStealer - Remote Desktop - Initial Checkin |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M9 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M5 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Win32/WarHawk Checkin Activity |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS Successful Office 365 Phish 2022-07-19 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Manjusaka C2 Client Heartbeat |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish 2022-10-26 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS Successful Generic Phish 2022-07-29 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M8 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M11 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Win32/Unk.HRESQ! MultiDownloader Checkin M2 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish 2022-10-26 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M7 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M6 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Fake Browser Update via Error Page Web Inject |
rev 1 |
2023-04-04 |
| snort |
ET TROJAN Win32/RisePro CnC Server Response M5 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN MSIL/Agent.CTK Checkin |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Linux DarkRadiation Ransomware Telegram Activity M1 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Win32/RisePro CnC Server Response M3 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M4 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Win32/Small.NO Checkin |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS Successful Facebook Credential Phish 2021-11-16 |
rev 3 |
2023-04-04 |
| snort |
ET ACTIVEX Possible Sparkasse Phishing Domain 2021-04-05 |
rev 3 |
2023-04-04 |
| snort |
ET TROJAN Win32/Agent.RDE Checkin |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN SideCopy APT Related CnC Response |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Fake Browser Update via Error Page Loader |
rev 1 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS Successful Microsoft Outlook Credential Phish 2022-10-03 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS Successful Trust Wallet Phish 2022-10-11 |
rev 2 |
2023-04-04 |