| suricata |
ET MALWARE StormKitty Data Exfil via Telegram |
rev 1 |
2020-10-13 |
| suricata |
ET WEB_SERVER PyCurl Suspicious User Agent Inbound |
rev 4 |
2020-10-13 |
| suricata |
ET PHISHING Possible Successful Citibank Phish M1 2016-08-22 |
rev 6 |
2020-10-13 |
| suricata |
ET PHISHING Amazon Phishing Landing 2020-10-13 |
rev 2 |
2020-10-13 |
| suricata |
ET MALWARE CASHY200 CnC Domain in DNS Lookup |
rev 3 |
2020-10-13 |
| suricata |
ET PHISHING Instagram Phishing Landing 2020-10-13 |
rev 2 |
2020-10-13 |
| suricata |
ET MALWARE CASHY200 CnC Domain in DNS Lookup |
rev 3 |
2020-10-13 |
| suricata |
ET INFO BSSID Location Lookup via api .mylnikov .org |
rev 1 |
2020-10-13 |
| suricata |
ET EXPLOIT QNAP Shellshock CVE-2014-6271 |
rev 5 |
2020-10-13 |
| suricata |
ET MALWARE CASHY200 CnC Domain in DNS Lookup |
rev 3 |
2020-10-13 |
| snort |
ET TROJAN PowerGhost Checkin CnC in DNS Query |
rev 2 |
2020-10-12 |
| snort |
ET TROJAN PowerGhost Staging CnC in DNS Query |
rev 2 |
2020-10-12 |
| snort |
ET TROJAN PoetRAT Upload via HTTP |
rev 2 |
2020-10-12 |
| snort |
ET POLICY Pastebin-style Service nrecom in DNS Query |
rev 2 |
2020-10-12 |
| suricata |
ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 |
rev 7 |
2020-10-12 |
| suricata |
ET ADWARE_PUP Adware.Ezula Checkin |
rev 6 |
2020-10-12 |
| suricata |
ET ADWARE_PUP Loadmoney User Agent |
rev 9 |
2020-10-12 |
| suricata |
ET ADWARE_PUP Win32/Adware.Winggo.AB Checkin |
rev 7 |
2020-10-12 |
| suricata |
ET ADWARE_PUP Antispywaremaster.com/Privacyprotector.com Fake AV Checkin |
rev 9 |
2020-10-12 |
| suricata |
ET ADWARE_PUP Unknown Malware patchlist.xml Request |
rev 5 |
2020-10-12 |
| suricata |
ET ADWARE_PUP Loadmoney Checkin 3 |
rev 8 |
2020-10-12 |
| suricata |
ET MALWARE Java Download non Jar file |
rev 9 |
2020-10-10 |
| suricata |
ET PHISHING Successful Paypal Phish Nov 24 2014 |
rev 5 |
2020-10-09 |
| suricata |
ET PHISHING Successful Paypal Phish Nov 24 2014 |
rev 5 |
2020-10-09 |
| suricata |
ET WEB_CLIENT Office Discovery HTA file Likely CVE-2017-0199 Request M2 |
rev 3 |
2020-10-09 |
| suricata |
ET EXPLOIT_KIT Possible Unknown TDS /top2.html |
rev 5 |
2020-10-09 |
| suricata |
ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 3 |
rev 6 |
2020-10-09 |
| suricata |
ET MALWARE Likely Malicious Windows SCT Download MSXMLHTTP M1 |
rev 4 |
2020-10-09 |
| suricata |
ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1 |
rev 5 |
2020-10-09 |
| suricata |
ET EXPLOIT SolusVM 1.13.03 SQL injection |
rev 6 |
2020-10-09 |
| suricata |
ET PHISHING Successful PayPal Phish Nov 24 2014 |
rev 5 |
2020-10-09 |
| suricata |
ET MALWARE W32/Madness Checkin |
rev 6 |
2020-10-09 |
| suricata |
ET MALWARE Win32.Kazy Checkin |
rev 5 |
2020-10-09 |
| sigma |
DLL Execution via Rasautou.exe |
test |
2020-10-09 |
| snort |
ET TROJAN XDUpload Uploading Directory Listting |
rev 3 |
2020-10-08 |
| suricata |
ET MALWARE XDUpload Uploading Directory Listting |
rev 2 |
2020-10-08 |
| suricata |
ET INFO Download Request to Hotfile.com |
rev 4 |
2020-10-08 |
| suricata |
ET MALWARE Miniduke Variant CnC Beacon via WebDAV |
rev 4 |
2020-10-08 |
| suricata |
ET MALWARE APT29 Implant8 - Evil Twitter Callback |
rev 4 |
2020-10-08 |
| suricata |
ET INFO check.torproject.org IP lookup/Tor Usage check over HTTP |
rev 5 |
2020-10-08 |