| snort |
ET TROJAN S400 RAT Client Checkin via Discord |
rev 1 |
2021-09-30 |
| snort |
ET TROJAN Havex RAT CnC Server Response |
rev 2 |
2021-09-30 |
| snort |
ET TROJAN S400 RAT Server Response |
rev 1 |
2021-09-30 |
| snort |
ET TROJAN S400 RAT Client Checkin |
rev 1 |
2021-09-30 |
| suricata |
ET MALWARE S400 RAT Server Response |
rev 1 |
2021-09-30 |
| suricata |
ET MALWARE S400 RAT Client Checkin |
rev 1 |
2021-09-30 |
| snort |
ET TROJAN Win32/Colibri Loader Activity |
rev 2 |
2021-09-29 |
| snort |
ET CURRENT_EVENTS BulletProofLink Phishkit Password-Processing URL |
rev 2 |
2021-09-29 |
| snort |
ET TROJAN ReflectiveGnome Download Activity |
rev 2 |
2021-09-29 |
| suricata |
ET PHISHING BulletProofLink Phishkit Password-Processing URL |
rev 2 |
2021-09-29 |
| snort |
ET TROJAN Possible FoggyWeb Backdoor Server Response |
rev 2 |
2021-09-28 |
| snort |
ET TROJAN Win32/Sabsik.FL.B!ml CnC Activity |
rev 1 |
2021-09-27 |
| snort |
ET TROJAN MirrorBlast CnC Activity M3 |
rev 2 |
2021-09-24 |
| snort |
ET CURRENT_EVENTS PerSwaysion Phishkit Landing Page |
rev 1 |
2021-09-24 |
| snort |
ET CURRENT_EVENTS PerSwaysion Phishkit Javascript Variable |
rev 1 |
2021-09-24 |
| snort |
ET INFO Microsoft Netconnection Domain in DNS Lookup |
rev 2 |
2021-09-24 |
| snort |
ET CURRENT_EVENTS PerSwaysion Phishkit Message Variables |
rev 1 |
2021-09-24 |
| suricata |
ET MALWARE MirrorBlast CnC Activity M3 |
rev 2 |
2021-09-24 |
| snort |
ET POLICY Possible Autodiscover Credentials Leak via Basic Auth |
rev 2 |
2021-09-23 |
| snort |
ET TROJAN TinyTurla CnC Activity |
rev 2 |
2021-09-23 |
| snort |
ET CURRENT_EVENTS PerSwaysion Phishkit Javascript Config Variables |
rev 3 |
2021-09-22 |
| snort |
ET INFO Possible Outdated Browser Landing Page M1 |
rev 3 |
2021-09-22 |
| snort |
ET CURRENT_EVENTS Generic Phishkit Javascript Response with Phishy Text |
rev 3 |
2021-09-22 |
| snort |
ET INFO Outdated Browser Landing Page M2 |
rev 3 |
2021-09-22 |
| suricata |
ET PHISHING PerSwaysion Phishkit Javascript Config Variables |
rev 2 |
2021-09-22 |
| suricata |
ET INFO Possible Outdated Browser Landing Page M1 |
rev 2 |
2021-09-22 |
| suricata |
ET HUNTING Generic Phishkit Javascript Response with Phishy Text |
rev 2 |
2021-09-22 |
| suricata |
ET INFO Outdated Browser Landing Page M2 |
rev 3 |
2021-09-22 |
| snort |
ET TROJAN NSIS/TrojanDownloader.Agent.NZK CnC Activity M2 |
rev 2 |
2021-09-21 |
| snort |
ET CURRENT_EVENTS Zbot Generic URI/Header Struct .bin |
rev 8 |
2021-09-21 |
| snort |
ET TROJAN Win32/CopperStealer CnC Activity M2 |
rev 6 |
2021-09-21 |
| snort |
ET TROJAN NSIS/TrojanDownloader.Agent.NZK CnC Activity M1 |
rev 2 |
2021-09-21 |
| snort |
ET TROJAN GCleaner Downloader Activity M5 |
rev 2 |
2021-09-21 |
| snort |
ET TROJAN NSIS/TrojanDownloader.Agent.NZK Server Response |
rev 2 |
2021-09-21 |
| suricata |
ET MALWARE NSIS/TrojanDownloader.Agent.NZK Server Response |
rev 2 |
2021-09-21 |
| snort |
ET TROJAN APT/Bitter Related CnC Domain in DNS Lookup |
rev 2 |
2021-09-20 |
| snort |
ET TROJAN Win32/Numando Banker CnC Activity |
rev 1 |
2021-09-17 |
| snort |
ET TROJAN Possible SQUIRRELWAFFLE Server Response |
rev 2 |
2021-09-17 |
| snort |
ET TROJAN TransparentTribe Related CnC Activity |
rev 1 |
2021-09-16 |
| snort |
ET INFO DNS Lookup for 8+ hexadecimal only duckdns domain |
rev 2 |
2021-09-16 |