| snort |
ET INFO Powershell Request for paste .ee Page |
rev 3 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS IRS Credential Phish Credit Card Payment Data Exfil |
rev 2 |
2022-04-18 |
| snort |
ET EXPLOIT Possible NGINX Reference LDAP Query Injection Attack |
rev 3 |
2022-04-18 |
| snort |
ET WEB_SPECIFIC_APPS coRED CMS rubID Parameter SELECT FROM SQL Injection Attempt |
rev 4 |
2022-04-18 |
| snort |
GPL NETBIOS DCERPC CoGetInstanceFromFile little endian overflow attempt |
rev 7 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Successful Adobe Phish 2022-01-12 |
rev 2 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Successful CSIS Credential Phish |
rev 2 |
2022-04-18 |
| snort |
ET WEB_SPECIFIC_APPS ActiveNews Manager SQL Injection Attempt -- activenews_view.asp articleID UPDATE |
rev 7 |
2022-04-18 |
| snort |
ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- content.php where UPDATE |
rev 7 |
2022-04-18 |
| snort |
ET TROJAN W32/Snojan.BNQKZQH User-Agent |
rev 3 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish 2022-03-18 |
rev 2 |
2022-04-18 |
| snort |
ET TROJAN [PTsecurity] Win32/Remcos RAT Checkin 51 |
rev 2 |
2022-04-18 |
| snort |
ET TELNET SUSPICIOUS Path to BusyBox |
rev 2 |
2022-04-18 |
| snort |
ET TROJAN MSIL/Injector.VVP Downloader Activity M1 |
rev 3 |
2022-04-18 |
| snort |
ET WEB_SPECIFIC_APPS Aktueldownload Haber script SQL Injection Attempt -- rss.asp kid UNION SELECT |
rev 7 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Successful Monzo Credential Phish M2 2022-02-17 |
rev 2 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Successful Citibank Phish 2021-11-10 |
rev 3 |
2022-04-18 |
| snort |
ET TROJAN Lazarus Related Maldoc Activity |
rev 2 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Paypal Phishing Landing Jun 28 2017 |
rev 3 |
2022-04-18 |
| snort |
ET EXPLOIT Oracle WebLogic - wls-wsat Component Deserialization Remote Code Execution Windows |
rev 3 |
2022-04-18 |
| snort |
ET TROJAN Nbar.co.kr Related Trojan Checkin |
rev 4 |
2022-04-18 |
| snort |
ET TROJAN Lyceum Golang HTTP Backdoor CnC Checkin |
rev 2 |
2022-04-18 |
| snort |
ET TROJAN Lyceum Golang HTTP Backdoor Requesting Commands |
rev 2 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Successful Google Drive Phish 2016-11-18 |
rev 2 |
2022-04-18 |
| snort |
ET INFO Doc Template Downloaded from DDNS Site |
rev 2 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Activity POST |
rev 2 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish 2022-03-02 |
rev 2 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Observed OWA Phishing Landing Page 2021-08-20 |
rev 2 |
2022-04-18 |
| snort |
ET WEB_SPECIFIC_APPS Aj Square RSS Reader url SQL Injection |
rev 5 |
2022-04-18 |
| snort |
ET TROJAN Lyceum Golang HTTP Backdoor Submitting Data to CnC |
rev 2 |
2022-04-18 |
| snort |
ET TROJAN Tortoiseshell/HMH Download Request |
rev 3 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS TodayZoo Phishing Kit GET M1 |
rev 2 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Successful TA422 Credential Phish 2022-03-17 M1 |
rev 2 |
2022-04-18 |
| snort |
ET WEB_SPECIFIC_APPS Apache Struts ognl inbound OGNL injection remote code execution attempt |
rev 3 |
2022-04-18 |
| snort |
ET TROJAN MSIL/CoinMiner Performing System Checkin |
rev 3 |
2022-04-18 |
| suricata |
ET PHISHING Successful Generic Credential Phish 2022-03-02 |
rev 3 |
2022-04-18 |
| suricata |
ET PHISHING Observed OWA Phishing Landing Page 2021-08-20 |
rev 2 |
2022-04-18 |
| suricata |
ET MALWARE [PTsecurity] Win32/Remcos RAT Checkin 51 |
rev 2 |
2022-04-18 |
| suricata |
GPL NETBIOS DCERPC CoGetInstanceFromFile little endian overflow attempt |
rev 8 |
2022-04-18 |
| suricata |
ET MALWARE MSIL/Crimson Rat CnC Server Response |
rev 2 |
2022-04-18 |