| suricata |
ET MALWARE W32/Hesperus.Banker Tr-mail Variant Sending Data To CnC |
rev 4 |
2020-04-27 |
| suricata |
ET MALWARE Hiloti/Mufanom Downloader Checkin |
rev 11 |
2020-04-27 |
| suricata |
ET MALWARE Kishop.A checkin |
rev 3 |
2020-04-27 |
| suricata |
ET MALWARE Worm.VBS.ayr Checkin 2 |
rev 6 |
2020-04-27 |
| snort |
ET TROJAN Parallax CnC Response Activity M9 |
rev 2 |
2020-04-25 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on Compromised External Server |
rev 2 |
2020-04-24 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Compromised Internal Server |
rev 2 |
2020-04-24 |
| snort |
ET MOBILE_MALWARE NSO Group CnC Domain in DNS Lookup |
rev 2 |
2020-04-24 |
| snort |
ET WEB_CLIENT Leaf PHPMailer Accessed on External Server |
rev 2 |
2020-04-24 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on Compromised External Server |
rev 2 |
2020-04-24 |
| snort |
ET WEB_SERVER Leaf PHPMailer Accessed on Internal Server |
rev 2 |
2020-04-24 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Compromised Internal Server |
rev 2 |
2020-04-24 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Compromised Internal Server |
rev 2 |
2020-04-24 |
| snort |
ET MOBILE_MALWARE NSO Group CnC Domain in DNS Lookup |
rev 2 |
2020-04-24 |
| snort |
ET MOBILE_MALWARE NSO Group CnC Domain in DNS Lookup |
rev 2 |
2020-04-24 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on Compromised External Server |
rev 2 |
2020-04-24 |
| snort |
ET MOBILE_MALWARE NSO Group CnC Domain in DNS Lookup |
rev 2 |
2020-04-24 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Compromised Internal Server |
rev 2 |
2020-04-24 |
| suricata |
ET WEB_SERVER Possible OpenX Backdoor Backdoor Access POST to flowplayer |
rev 4 |
2020-04-24 |
| suricata |
ET MALWARE Possible Win32.Bicololo Checkin |
rev 4 |
2020-04-24 |
| suricata |
ET USER_AGENTS Unknown - Java Request - gt 60char hex-ascii |
rev 7 |
2020-04-24 |
| suricata |
ET WEB_SERVER WebShell Generic - ASP File Uploaded |
rev 12 |
2020-04-24 |
| suricata |
ET WEB_CLIENT Leaf PHPMailer Accessed on External Server |
rev 1 |
2020-04-24 |
| suricata |
ET WEB_SERVER - EXE File Uploaded - Hex Encoded |
rev 3 |
2020-04-24 |
| suricata |
ET WEB_SERVER WebShell - Pouya - URI - raiz |
rev 3 |
2020-04-24 |
| suricata |
ET WEB_SERVER ColdFusion scheduleedit access |
rev 3 |
2020-04-24 |
| suricata |
ET EXPLOIT_KIT Watering Hole applet name AppletHigh.jar |
rev 5 |
2020-04-24 |
| suricata |
ET WEB_SERVER ColdFusion path disclosure to get the absolute path |
rev 5 |
2020-04-24 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on Compromised External Server |
rev 2 |
2020-04-24 |
| suricata |
ET WEB_SERVER Access to /phppath/php Possible Plesk 0-day Exploit June 05 2013 |
rev 3 |
2020-04-24 |
| suricata |
ET MALWARE Tibs Checkin |
rev 7 |
2020-04-24 |
| suricata |
ET EXPLOIT_KIT Unknown Malvertising Exploit Kit Hostile Jar app.jar |
rev 5 |
2020-04-24 |
| suricata |
ET WEB_SERVER Leaf PHPMailer Accessed on Internal Server |
rev 1 |
2020-04-24 |
| suricata |
ET MALWARE Suspicious User-Agent MyAgrent |
rev 4 |
2020-04-24 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Compromised Internal Server |
rev 2 |
2020-04-24 |
| suricata |
ET WEB_SERVER WebShell - GODSpy - Cookie |
rev 3 |
2020-04-24 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on Compromised External Server |
rev 2 |
2020-04-24 |
| suricata |
ET WEB_SERVER WebShell - ASPyder -File Upload - POST Structure |
rev 3 |
2020-04-24 |
| suricata |
ET WEB_SERVER WebShell - GODSPy - Auth Creds |
rev 3 |
2020-04-24 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Compromised Internal Server |
rev 2 |
2020-04-24 |