| snort |
ET CURRENT_EVENTS Tech Support Scam - Windows Firewall M2 2021-08-17 |
rev 1 |
2021-10-17 |
| snort |
ET CURRENT_EVENTS Tech Support Scam - Windows Firewall M3 2021-08-17 |
rev 1 |
2021-10-17 |
| snort |
ET CURRENT_EVENTS Tech Support Scam - Windows Firewall M5 2021-08-17 |
rev 1 |
2021-10-17 |
| snort |
ET CURRENT_EVENTS Tech Support Scam - Generic Components |
rev 1 |
2021-10-17 |
| snort |
ET CURRENT_EVENTS Tech Support Scam - Windows Firewall M1 2021-08-17 |
rev 1 |
2021-10-17 |
| snort |
ET TROJAN Jasper URI Path Observed M2 |
rev 1 |
2021-10-17 |
| suricata |
ET MALWARE Jasper URI Path Observed M2 |
rev 1 |
2021-10-17 |
| suricata |
ET MALWARE Jasper URI Path Observed M1 |
rev 1 |
2021-10-17 |
| snort |
ET TROJAN Win32/MysterySnail RAT CnC Domain in DNS Lookup |
rev 2 |
2021-10-15 |
| snort |
ET TROJAN Win32/Agent.RTQ CnC Activity |
rev 1 |
2021-10-15 |
| suricata |
ET MALWARE Win32/Agent.RTQ CnC Activity |
rev 1 |
2021-10-15 |
| snort |
ET CURRENT_EVENTS Generic Phishkit Landing Page M2 |
rev 2 |
2021-10-13 |
| suricata |
ET PHISHING Generic Phishkit Landing Page M3 |
rev 2 |
2021-10-13 |
| suricata |
ET PHISHING Generic Phishkit Landing Page M2 |
rev 2 |
2021-10-13 |
| snort |
ET MALWARE Win32.Perinet CnC Checkin |
rev 1 |
2021-10-12 |
| snort |
ET CURRENT_EVENTS Generic Phishkit Landing Page M3 |
rev 1 |
2021-10-12 |
| snort |
ET POLICY NSecSoft Remote Monitoring Update/Download Activity M2 |
rev 1 |
2021-10-12 |
| suricata |
ET INFO NSecSoft Remote Monitoring Update/Download Activity M2 |
rev 1 |
2021-10-12 |
| snort |
ET TROJAN Android/AhMyth RAT Init Checkin |
rev 1 |
2021-10-11 |
| snort |
ET TROJAN Android/AhMyth RAT WebSocket Session |
rev 1 |
2021-10-11 |
| snort |
ET POLICY Pastebin-style Service paste .c-net in DNS Query |
rev 1 |
2021-10-07 |
| suricata |
ET INFO Pastebin-style Service paste .c-net in DNS Query |
rev 1 |
2021-10-07 |
| snort |
ET WEB_SPECIFIC_APPS Possible Wordpress Plugin TheCartPress Privilege Escalation Attempt Inbound |
rev 1 |
2021-10-06 |
| snort |
ET TROJAN MirrorBlast KiXtart Downloader Client Request M2 |
rev 2 |
2021-10-06 |
| snort |
ET POLICY NSecSoft Remote Monitoring Update/Download Activity M1 |
rev 2 |
2021-10-06 |
| suricata |
ET WEB_SPECIFIC_APPS Possible Wordpress Plugin TheCartPress Privilege Escalation Attempt Inbound |
rev 1 |
2021-10-06 |
| snort |
ET MALWARE Observed DNS Query to Known PUA Host Domain |
rev 1 |
2021-10-05 |
| snort |
ET MALWARE Observed DNS Query to Known PUA Host Domain |
rev 1 |
2021-10-05 |
| snort |
ET POLICY Apache HTTP Server 2.4.49 Observed - Vulnerable to CVE-2021-41773 |
rev 2 |
2021-10-05 |
| snort |
ET TROJAN Win32/Remcos RAT Checkin 756 |
rev 2 |
2021-10-05 |
| snort |
ET POLICY AmeriTechnology Group - CHARM Client |
rev 2 |
2021-10-05 |
| suricata |
ET PHISHING PerSwaysion Phishkit Landing Page |
rev 2 |
2021-10-05 |
| suricata |
ET INFO Apache HTTP Server 2.4.49 Observed - Vulnerable to CVE-2021-41773 |
rev 1 |
2021-10-05 |
| suricata |
ET MALWARE Observed DNS Query to Known PUA Host Domain |
rev 1 |
2021-10-05 |
| suricata |
ET ADWARE_PUP Observed DNS Query to Known PUA Host Domain |
rev 1 |
2021-10-05 |
| suricata |
ET PHISHING PerSwaysion Phishkit Javascript Variable |
rev 2 |
2021-10-05 |
| suricata |
ET PHISHING PerSwaysion Phishkit Message Variables |
rev 2 |
2021-10-05 |
| suricata |
ET MALWARE Win32/Remcos RAT Checkin 756 |
rev 1 |
2021-10-05 |
| snort |
ET TROJAN Wintervivern Checkin |
rev 1 |
2021-10-04 |
| snort |
ET TROJAN Wintervivern Retrieving Task |
rev 1 |
2021-10-04 |