| suricata |
ET WEB_CLIENT Microsoft Tech Support Phone Scam M3 Jul 07 2017 |
rev 4 |
2020-09-01 |
| suricata |
ET MOBILE_MALWARE Android.Bgserv POST of Data to CnC Server |
rev 4 |
2020-09-01 |
| suricata |
ET WEB_SERVER 16Shop Phishing Kit Accessed on Internal Compromised Server |
rev 3 |
2020-09-01 |
| suricata |
ET EXPLOIT Joomla 3.2.1 SQL injection attempt |
rev 4 |
2020-09-01 |
| suricata |
ET MALWARE Outbound POST Request with ps PowerShell Command Output |
rev 4 |
2020-09-01 |
| suricata |
ET WEB_CLIENT Fake AV Phone Scam Domain M1 Mar 3 |
rev 5 |
2020-09-01 |
| suricata |
ET WEB_CLIENT Fake AV Phone Scam Landing June 11 2015 M1 |
rev 5 |
2020-09-01 |
| suricata |
ET WEB_SPECIFIC_APPS WordPress SQL Injection Attempt -- admin-ajax.php cookie SELECT |
rev 9 |
2020-09-01 |
| suricata |
ET WEB_CLIENT DRIVEBY FakeUpdate - URI - /styles/javaupdate.css |
rev 4 |
2020-09-01 |
| suricata |
ET MALWARE Aurora Ransomware CnC Checkin |
rev 4 |
2020-09-01 |
| suricata |
ET INFO McAfee AV Download - Set |
rev 2 |
2020-09-01 |
| suricata |
ET P2P Tor Get Server Request |
rev 5 |
2020-09-01 |
| suricata |
ET EXPLOIT Secutech Router DNS Changer Exploit Attempt |
rev 2 |
2020-09-01 |
| suricata |
ET MALWARE FrameworkPOS Covert DNS CnC Initial Check In |
rev 4 |
2020-09-01 |
| sigma |
Ruby on Rails Framework Exceptions |
stable |
2020-09-01 |
| sigma |
Spring Framework Exceptions |
stable |
2020-09-01 |
| sigma |
Python SQL Exceptions |
stable |
2020-09-01 |
| sigma |
Django Framework Exceptions |
stable |
2020-09-01 |
| snort |
ET CURRENT_EVENTS Generic Phishing Panel Accessed on External Server |
rev 2 |
2020-08-31 |
| snort |
ET CURRENT_EVENTS Caixa Phishing Landing |
rev 2 |
2020-08-31 |
| snort |
ET TROJAN Upatre User-Agent |
rev 2 |
2020-08-31 |
| snort |
ET CURRENT_EVENTS Generic Phishing Panel Accessed on Internal Server |
rev 2 |
2020-08-31 |
| suricata |
ET PHISHING Cloned Telekom / Tmobile Page - Possible Phishing Landing |
rev 2 |
2020-08-31 |
| suricata |
ET ADWARE_PUP Adaware.BarACE Checkin and Update |
rev 7 |
2020-08-31 |
| suricata |
ET ADWARE_PUP MyGlobalSearch Spyware bar update |
rev 8 |
2020-08-31 |
| suricata |
ET ADWARE_PUP MyGlobalSearch Spyware bar update 2 |
rev 8 |
2020-08-31 |
| suricata |
ET ADWARE_PUP Loadmoney.A Checkin 2 |
rev 6 |
2020-08-31 |
| suricata |
ET ADWARE_PUP Downloader Checkin - Downloads Rogue Adware |
rev 9 |
2020-08-31 |
| suricata |
ET ADWARE_PUP W32/SoftonicDownloader.Adware User Agent |
rev 5 |
2020-08-31 |
| suricata |
ET PHISHING Cloned Yahoo Page - Possible Phishing Landing |
rev 2 |
2020-08-31 |
| suricata |
ET PHISHING Cloned Linkedin Page - Possible Phishing Landing |
rev 2 |
2020-08-31 |
| suricata |
ET WEB_SERVER ThinkPHP RCE Exploitation Attempt |
rev 3 |
2020-08-31 |
| suricata |
ET ADWARE_PUP Adrevmedia Related Media Manager Spyware Checkin |
rev 6 |
2020-08-31 |
| suricata |
ET ADWARE_PUP All Numerical .ru Domain HTTP Request Likely Malware Related |
rev 7 |
2020-08-31 |
| suricata |
ET WEB_SPECIFIC_APPS ECSHOP user.php SQL INJECTION via Referer |
rev 2 |
2020-08-31 |
| suricata |
ET ADWARE_PUP W32/Wajam.Adware Successful Install |
rev 6 |
2020-08-31 |
| suricata |
ET ADWARE_PUP Generic Adware Install Report |
rev 7 |
2020-08-31 |
| suricata |
ET ADWARE_PUP CWS Trafcool.biz Related Installer |
rev 7 |
2020-08-31 |
| suricata |
ET PHISHING Cloned Impots Gouv FR Page - Possible Phishing Landing |
rev 2 |
2020-08-31 |
| suricata |
ET PHISHING Caixa Phishing Landing |
rev 2 |
2020-08-31 |