| suricata |
ET PHISHING Successful Microsoft Outlook Credential Phish 2022-10-03 |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING [TW] EvilProxy AiTM Microsoft HTTP HOST M3 |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING [TW] EvilProxy AiTM Microsoft HTTP HOST M8 |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING Successful Facebook Credential Phish 2021-11-16 |
rev 4 |
2023-04-04 |
| suricata |
ET PHISHING [TW] EvilProxy AiTM Microsoft HTTP HOST M2 |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING [TW] EvilProxy AiTM Microsoft HTTP HOST M4 |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING Successful Generic Phish 2022-07-29 |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING [TW] EvilProxy AiTM Microsoft HTTP HOST M7 |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING [TW] EvilProxy AiTM Microsoft HTTP HOST M10 |
rev 1 |
2023-04-04 |
| suricata |
ET MALWARE Fake Browser Update via Error Page Payload |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING [TW] EvilProxy AiTM Microsoft HTTP HOST M9 |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING Successful Generic Phish 2022-03-28 |
rev 2 |
2023-04-04 |
| suricata |
ET PHISHING [TW] EvilProxy AiTM Microsoft HTTP HOST M11 |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING [TW] EvilProxy AiTM Microsoft HTTP HOST M6 |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING [TW] Robin Banks Redirect M2 |
rev 1 |
2023-04-04 |
| suricata |
ET MALWARE DarkCrystal Rat Stealer Data Exfiltration Activity |
rev 2 |
2023-04-04 |
| suricata |
ET PHISHING Successful Navy Federal Phish 2022-10-11 |
rev 1 |
2023-04-04 |
| suricata |
ET MALWARE Fake Browser Update via Error Page Loader |
rev 1 |
2023-04-04 |
| suricata |
ET MALWARE Fake Browser Update via Error Page Web Inject |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING Successful Office 365 Phish 2022-07-19 |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING Successful OWA Phish 2022-07-15 |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING [TW] EvilProxy AiTM Microsoft HTTP HOST M1 |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING [TW] EvilProxy AiTM Microsoft HTTP HOST M5 |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING Successful Trust Wallet Phish 2022-10-11 |
rev 1 |
2023-04-04 |
| suricata |
ET PHISHING Successful Telstra Credential Phish 2022-08-26 |
rev 1 |
2023-04-04 |
| snort |
ET WEB_SERVER Babydraco WebShell Activity |
rev 3 |
2023-04-03 |
| snort |
ET TROJAN Observed 3CX Supply Chain Attack Cookie M2 |
rev 2 |
2023-04-03 |
| sigma |
Silence.EDA Detection |
test |
2023-04-03 |
| sigma |
Osacompile Execution By Potentially Suspicious Applet/Osascript |
test |
2023-04-03 |
| snort |
ET TROJAN Observed 3CX Supply Chain Attack Cookie |
rev 1 |
2023-03-31 |
| snort |
ET TROJAN DorkBot.Downloader CnC Beacon M2 |
rev 1 |
2023-03-31 |
| suricata |
ET MALWARE DorkBot.Downloader CnC Beacon M2 |
rev 1 |
2023-03-31 |
| sigma |
Potential Compromised 3CXDesktopApp ICO C2 File Download |
test |
2023-03-31 |
| sigma |
Potential Compromised 3CXDesktopApp Beaconing Activity - DNS |
test |
2023-03-31 |
| sigma |
Potential Compromised 3CXDesktopApp Beaconing Activity - Netcon |
test |
2023-03-31 |
| snort |
ET TROJAN OpcJacker HVNC Variant Magic Packet |
rev 1 |
2023-03-30 |
| snort |
ET TROJAN ALFA TEaM Shell Landing Page |
rev 1 |
2023-03-30 |
| suricata |
ET MALWARE OpcJacker HVNC Variant Magic Packet |
rev 1 |
2023-03-30 |
| suricata |
ET WEB_CLIENT ALFA TEaM Shell Landing Page |
rev 1 |
2023-03-30 |
| snort |
ET TROJAN MalDoc/Gamaredon CnC Activity M1 |
rev 1 |
2023-03-29 |