| suricata |
ET MALWARE Ttint XORed CnC Checkin |
rev 2 |
2020-09-30 |
| snort |
ET TROJAN Trojan.Win32.Codenox.gyezu CnC Activity |
rev 2 |
2020-09-29 |
| snort |
ET TROJAN APT39/Chafer Payload - CnC Checkin M2 |
rev 2 |
2020-09-29 |
| snort |
ET POLICY Outbound HTTP Request with BITS_POST Method |
rev 2 |
2020-09-29 |
| snort |
ET TROJAN APT39/Chafer Payload - CnC Checkin M1 |
rev 2 |
2020-09-29 |
| snort |
ET TROJAN Mozi Botnet DHT Config Sent |
rev 1 |
2020-09-29 |
| snort |
ET TROJAN Vicious Panda Checkin |
rev 1 |
2020-09-29 |
| suricata |
ET INFO I2P Seeds File Request |
rev 4 |
2020-09-29 |
| suricata |
ET INFO Outbound HTTP Request with BITS_POST Method |
rev 1 |
2020-09-29 |
| suricata |
ET MALWARE Vicious Panda Checkin |
rev 1 |
2020-09-29 |
| suricata |
ET MALWARE Mozi Botnet DHT Config Sent |
rev 1 |
2020-09-29 |
| suricata |
ET EXPLOIT_KIT Unknown Malicious Second Stage Download URI Struct M2 Feb 06 2015 |
rev 4 |
2020-09-29 |
| suricata |
ET WEB_SPECIFIC_APPS Wordpress PingBack Possible GHOST attempt |
rev 8 |
2020-09-29 |
| suricata |
ET MALWARE APT39/Chafer Payload - CnC Checkin M2 |
rev 1 |
2020-09-29 |
| suricata |
ET MALWARE FindPOS Checkin |
rev 5 |
2020-09-29 |
| suricata |
ET MALWARE APT39/Chafer Payload - CnC Checkin M1 |
rev 1 |
2020-09-29 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-09-28 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-09-28 |
| suricata |
ET INFO HTTP Request to WebDAV CloudMe Service |
rev 4 |
2020-09-28 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-09-28 |
| suricata |
ET MALWARE W32/Fin4.InfoStealer Uploading User Credentials CnC Beacon |
rev 6 |
2020-09-28 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-09-28 |
| suricata |
ET EXPLOIT_KIT Evil Flash Redirector to RIG EK Dec 17 2014 |
rev 4 |
2020-09-28 |
| snort |
ET TROJAN Win32/Predator Variant Dropper Activity |
rev 2 |
2020-09-25 |
| suricata |
ET WEB_SERVER MongoDB Negated Parameter Server Side JavaScript Injection Attempt |
rev 4 |
2020-09-25 |
| suricata |
ET WEB_SERVER Possible CVE-2014-6271 Attempt in URI |
rev 6 |
2020-09-25 |
| suricata |
ET MALWARE W32/Zeus.InfoStealer Infection Campaign Wav.exe Request |
rev 5 |
2020-09-25 |
| suricata |
ET WEB_SPECIFIC_APPS WordPress Huge IT Image Gallery 1.0.0 SQL Injection |
rev 4 |
2020-09-25 |
| suricata |
ET MALWARE Trojan Downloader GetBooks UA |
rev 11 |
2020-09-25 |
| suricata |
ET WEB_CLIENT DRIVEBY Social Engineering Toolkit JAR Download |
rev 5 |
2020-09-25 |
| suricata |
ET MALWARE OneLouder Common URI Struct |
rev 4 |
2020-09-25 |
| suricata |
ET MALWARE Ponmocup C2 Sending Data to Controller 1 |
rev 8 |
2020-09-25 |
| suricata |
ET MALWARE W32/Zeus.InfoStealer Infection Campaign Heap.exe Request |
rev 5 |
2020-09-25 |
| snort |
ET TROJAN PS/SunCrypt Ransomware CnC Activity |
rev 2 |
2020-09-24 |
| suricata |
ET MALWARE W32/HelloBridge.Backdoor Register CnC Beacon |
rev 4 |
2020-09-24 |
| suricata |
ET EXPLOIT Supermicro BMC Password Disclosure 1 |
rev 6 |
2020-09-24 |
| suricata |
ET MALWARE Sasfis Botnet Client Reporting Back to Controller After Command Execution |
rev 8 |
2020-09-24 |
| suricata |
ET SCAN Possible WordPress xmlrpc.php wp.getUsersBlogs Flowbit Set |
rev 5 |
2020-09-24 |
| suricata |
ET MALWARE Sefnit Checkin |
rev 5 |
2020-09-24 |
| suricata |
ET WEB_SPECIFIC_APPS TimThumb Remote Command Execution |
rev 4 |
2020-09-24 |