| suricata |
ET PHISHING Successful Veridian Credit Union Credential Phish 2022-11-08 |
rev 1 |
2022-11-08 |
| suricata |
ET PHISHING Successful Roundcube Credential Phish 2022-11-08 |
rev 1 |
2022-11-08 |
| sigma |
Suspicious Screensaver Binary File Creation |
test |
2022-11-08 |
| sigma |
Potential AD User Enumeration From Non-Machine Account |
test |
2022-11-08 |
| snort |
ET MALWARE ChromeLoader CnC Error |
rev 1 |
2022-11-07 |
| snort |
ET TROJAN ChromeLoader CnC Checkin M1 |
rev 1 |
2022-11-07 |
| snort |
ET TROJAN ChromeLoader CnC Checkin M2 |
rev 1 |
2022-11-07 |
| suricata |
ET MALWARE ChromeLoader CnC Checkin M2 |
rev 1 |
2022-11-07 |
| suricata |
ET MALWARE ChromeLoader CnC Error |
rev 1 |
2022-11-07 |
| suricata |
ET MALWARE ChromeLoader CnC Checkin M1 |
rev 1 |
2022-11-07 |
| snort |
ET INFO localhost .run TLS Certification Observed |
rev 1 |
2022-11-04 |
| snort |
ET CURRENT_EVENTS Twitter Credential Phish Landing Page 2022-11-04 |
rev 1 |
2022-11-04 |
| snort |
ET ATTACK_RESPONSE Possible PowerShell AMSI Bypass Inbound |
rev 1 |
2022-11-04 |
| snort |
ET TROJAN Win32/DataStealer.P CnC Checkin |
rev 1 |
2022-11-04 |
| snort |
ET TROJAN Win32/Delf.UUW CnC Keep-Alive |
rev 1 |
2022-11-04 |
| snort |
ET CURRENT_EVENTS Successful Nordea Netbank Credential Phish 2022-11-04 |
rev 1 |
2022-11-04 |
| suricata |
ET MALWARE Win32/DataStealer.P CnC Checkin |
rev 1 |
2022-11-04 |
| suricata |
ET MALWARE Win32/Delf.UUW CnC Keep-Alive |
rev 1 |
2022-11-04 |
| suricata |
ET PHISHING Twitter Credential Phish Landing Page 2022-11-04 |
rev 1 |
2022-11-04 |
| suricata |
ET PHISHING Successful Nordea Netbank Credential Phish 2022-11-04 |
rev 1 |
2022-11-04 |
| suricata |
ET MALWARE Hyperion Obfuscator Payload Inbound |
rev 1 |
2022-11-04 |
| snort |
ET TROJAN Win32/FlyStudio.OJJ CnC Checkin |
rev 1 |
2022-11-03 |
| snort |
ET TROJAN EICAR File Sent With X-Powered By Kaspersky Labs 2022-11-03 |
rev 1 |
2022-11-03 |
| suricata |
ET MALWARE Win32/FlyStudio.OJJ CnC Checkin |
rev 1 |
2022-11-03 |
| sigma |
Shadow Copies Deletion Using Operating Systems Utilities |
stable |
2022-11-03 |
| sigma |
Communication To Ngrok Tunneling Service - Linux |
test |
2022-11-03 |
| snort |
ET CURRENT_EVENTS TMOBILE Successful Credential Phish 2022-11-01 |
rev 1 |
2022-11-01 |
| snort |
ET TROJAN Win32/Agent.AETZ CnC Checkin |
rev 1 |
2022-11-01 |
| snort |
ET CURRENT_EVENTS TMOBILE Credential Phish Landing Page 2022-11-01 |
rev 1 |
2022-11-01 |
| snort |
ET MALWARE DriverFinder User-Agent Observed in HTTP Traffic |
rev 1 |
2022-11-01 |
| suricata |
ET PHISHING TMOBILE Credential Phish Landing Page 2022-11-01 |
rev 1 |
2022-11-01 |
| suricata |
ET MALWARE Win32/Agent.AETZ CnC Checkin |
rev 1 |
2022-11-01 |
| suricata |
ET ADWARE_PUP DriverFinder User-Agent Observed in HTTP Traffic |
rev 1 |
2022-11-01 |
| sigma |
Kavremover Dropped Binary LOLBIN Usage |
test |
2022-11-01 |
| snort |
ET INFO GET Request Exfiltrating Username and Hostname |
rev 1 |
2022-10-31 |
| snort |
ET CURRENT_EVENTS Successful RBFCU Credential Phish 2022-10-31 |
rev 1 |
2022-10-31 |
| snort |
ET TROJAN Win32.Agent.OSCF CnC Checkin |
rev 1 |
2022-10-31 |
| suricata |
ET INFO GET Request Exfiltrating Username and Hostname |
rev 1 |
2022-10-31 |
| suricata |
ET PHISHING Successful RBFCU Credential Phish 2022-10-31 |
rev 1 |
2022-10-31 |
| suricata |
ET MALWARE Win32.Agent.OSCF CnC Checkin |
rev 1 |
2022-10-31 |