| snort |
ET WEB_CLIENT Suspicious PHP UNZIP Tool Accessed on External Possibly Compromised Server |
rev 1 |
2021-11-03 |
| snort |
ET MALWARE Trojan-Dropper.MSIL CnC Traffic - POST |
rev 1 |
2021-11-03 |
| snort |
ET WEB_SERVER Suspicious PHP UNZIP Tool Accessed on Internal Possibly Compromised Server |
rev 1 |
2021-11-03 |
| snort |
ET WEB_SERVER Possible CVE-2014-6271 Attempt in Headers |
rev 4 |
2021-11-03 |
| suricata |
ET WEB_SERVER Suspicious PHP UNZIP Tool Accessed on Internal Possibly Compromised Server |
rev 1 |
2021-11-03 |
| suricata |
ET WEB_SERVER Possible CVE-2014-6271 Attempt in Headers |
rev 7 |
2021-11-03 |
| snort |
ET CURRENT_EVENTS IRS Payment Credential Phish Form |
rev 1 |
2021-11-02 |
| snort |
ET TROJAN TA450 Nagual CnC Activity |
rev 2 |
2021-11-02 |
| snort |
ET CURRENT_EVENTS IRS Credential Phish Direct Deposit Payment Data Exfil |
rev 1 |
2021-11-02 |
| snort |
ET EXPLOIT GoCD Authentication Bypass URI Path - add-on |
rev 1 |
2021-11-02 |
| snort |
ET CURRENT_EVENTS IRS Payment Credential Phish Debit Card or Check Data Exfil |
rev 1 |
2021-11-02 |
| suricata |
ET PHISHING IRS Payment Credential Phish Debit Card or Check Data Exfil |
rev 2 |
2021-11-02 |
| suricata |
ET PHISHING IRS Payment Credential Phish Form |
rev 2 |
2021-11-02 |
| suricata |
ET PHISHING IRS Credential Phish Direct Deposit Payment Data Exfil |
rev 2 |
2021-11-02 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Activity GET |
rev 1 |
2021-11-01 |
| snort |
ET TROJAN Go/PSW.Agent_AGen.A Data Exfil |
rev 2 |
2021-11-01 |
| snort |
ET TROJAN Win32/Sabsik.FL.B!ml Checkin |
rev 1 |
2021-11-01 |
| snort |
ET MALWARE Lantern Checkin |
rev 1 |
2021-11-01 |
| suricata |
ET MALWARE Win32/Sabsik.FL.B!ml Checkin |
rev 1 |
2021-11-01 |
| suricata |
ET PHISHING Generic Credential Phish Activity GET |
rev 2 |
2021-11-01 |
| suricata |
ET PHISHING Generic Credential Phish Activity POST |
rev 2 |
2021-11-01 |
| suricata |
ET ADWARE_PUP Lantern Checkin |
rev 1 |
2021-11-01 |
| snort |
ET MALWARE SecureDriverUpdater Checkin |
rev 2 |
2021-10-29 |
| snort |
ET TROJAN Win32/Kryptik.HNBU CryptoMiner - GetTasks Request |
rev 2 |
2021-10-29 |
| snort |
ET TROJAN slock Ransomware CnC Activity |
rev 2 |
2021-10-29 |
| snort |
ET MALWARE Win32/Systweak Checkin M2 |
rev 1 |
2021-10-29 |
| snort |
ET TROJAN Win32/Kryptik.HNBU CryptoMiner - Report Request |
rev 2 |
2021-10-29 |
| snort |
ET TROJAN Casbaneiro CnC Host Checkin M2 |
rev 2 |
2021-10-29 |
| suricata |
ET MALWARE Win32/Small.NO Checkin |
rev 1 |
2021-10-29 |
| snort |
ET TROJAN TinyNuke VNC Checkin |
rev 1 |
2021-10-28 |
| snort |
ET TROJAN Win32.Application.ThunderN.A Checkin |
rev 2 |
2021-10-28 |
| suricata |
ET MALWARE TinyNuke VNC Checkin |
rev 1 |
2021-10-28 |
| suricata |
ET MALWARE Win32.Application.ThunderN.A Checkin |
rev 2 |
2021-10-28 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Activity GET |
rev 2 |
2021-10-27 |
| snort |
ET TROJAN Win32/SVCReady Loader CnC Activity |
rev 2 |
2021-10-27 |
| snort |
ET EXPLOIT PHP Melody v3.0 SQL Injection Attempt |
rev 1 |
2021-10-27 |
| snort |
ET TROJAN Win32/SVCReady Loader Requesting Payload |
rev 1 |
2021-10-27 |
| snort |
ET EXPLOIT PHP Melody v3.0 SQL Injection Attempt |
rev 1 |
2021-10-27 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish Activity POST |
rev 1 |
2021-10-27 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish Activity POST |
rev 2 |
2021-10-27 |