| suricata |
ET MALWARE Win32/Unk HeavensGate Loader CnC in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET INFO DNS Query to a Reverse Proxy Service Observed |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE DNS Query for Known Malicious Domain Observed Serving Various Phish Campaigns |
rev 3 |
2020-09-17 |
| suricata |
ET EXPLOIT_KIT NeoSploit - Version Enumerated - Java |
rev 4 |
2020-09-17 |
| suricata |
ET INFO TOR .exit Pseudo TLD DNS Query |
rev 7 |
2020-09-17 |
| suricata |
ET MALWARE Glupteba CnC Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET INFO HTTP Request to Suspicious *.desi Domain |
rev 4 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE APT DNSpionage/Karkoff CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET INFO Possible EXE Download Request to ngrok |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE DonotGroup CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .de.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE LYCEUM CnC Domain Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE ELF/Emptiness CnC Domain in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE ELF/Emptiness CnC Domain in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE DonotGroup CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET WEB_CLIENT Observed DNS Query to Malicious Cookie Monster Roulette JS Cookie Stealer Exfil Domain |
rev 2 |
2020-09-17 |
| suricata |
ET MALWARE DNS Query for Known Malicious Domain Observed Serving Various Phish Campaigns |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE DNS Query for Known Malicious Domain Observed Serving Various Phish Campaigns |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE ELF/Emptiness CnC Domain in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Magecart CnC Domain Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE DonotGroup CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE ELF/Emptiness CnC Domain in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET INFO DNS Query for Suspicious .co.be Domain |
rev 7 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious lsass.exe in URI |
rev 16 |
2020-09-17 |
| suricata |
ET MALWARE Chafer CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET EXPLOIT Geutebruck Attempted Remote Command Injection Inbound |
rev 4 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE APT DNSpionage/Karkoff CnC Domain in DNS Lookup |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE Win32/Varenyky Spambot CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET SCAN w3af User-Agent 2 |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE Gift Cardshark CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET DNS Query to a .tk domain - Likely Hostile |
rev 7 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET DNS Query for .cc TLD |
rev 5 |
2020-09-17 |
| suricata |
ET PHISHING Possible Successful Phish - Password Submitted to *.000webhostapp.com |
rev 3 |
2020-09-17 |