| suricata |
ET EXPLOIT_KIT TDS - in.php |
rev 3 |
2020-04-23 |
| suricata |
ET MALWARE W32/DownloaderAgent.fajk Successful Infection CnC Beacon |
rev 3 |
2020-04-23 |
| suricata |
ET WEB_SERVER WebShell Generic - wget http - POST |
rev 3 |
2020-04-23 |
| suricata |
ET WEB_SERVER WebShell - MySQL Interface - Client Cookie mysql_web_admin*= |
rev 4 |
2020-04-23 |
| suricata |
ET MALWARE W32/Citadel Content.php CnC POST |
rev 3 |
2020-04-23 |
| suricata |
ET WEB_SERVER WebShell Generic - reg HKEY_LOCAL_MACHINE |
rev 3 |
2020-04-23 |
| suricata |
ET EXPLOIT Adobe PDF Zero Day Trojan.666 Payload libarext32.dll Second Stage Download POST |
rev 4 |
2020-04-23 |
| suricata |
ET MALWARE Gimemo Activity |
rev 5 |
2020-04-23 |
| suricata |
ET MOBILE_MALWARE Android/CoolPaperLeak Sending Information To CnC |
rev 3 |
2020-04-23 |
| suricata |
ET MOBILE_MALWARE Android/Smsilence.A Sending SMS Messages CnC Beacon |
rev 4 |
2020-04-23 |
| suricata |
ET MALWARE W32/StartPage.eba Dropper Checkin |
rev 4 |
2020-04-23 |
| suricata |
ET WEB_SERVER Non-Standard HTML page in Joomla /com_content/ dir |
rev 7 |
2020-04-23 |
| suricata |
ET MOBILE_MALWARE Android/Smsilence.A Successful Install Report |
rev 4 |
2020-04-23 |
| suricata |
ET WEB_SPECIFIC_APPS OSClass id parameter data access Attempt 2 |
rev 3 |
2020-04-23 |
| suricata |
ET MALWARE W32/Citadel Conf.bin Download From CnC Server |
rev 3 |
2020-04-23 |
| suricata |
ET MALWARE W32/Citadel Infection or Config URL Request |
rev 3 |
2020-04-23 |
| snort |
ET INFO Suspicious NULL DNS Request |
rev 2 |
2020-04-22 |
| snort |
ET MOBILE_MALWARE Suspected PROJECTSPY Cookie |
rev 2 |
2020-04-22 |
| suricata |
ET INFO GNU/Linux APT User-Agent Outbound likely related to package management |
rev 6 |
2020-04-22 |
| suricata |
ET MALWARE WORM_VOBFUS Checkin 1 |
rev 9 |
2020-04-22 |
| suricata |
ET WEB_SERVER ColdFusion administrator access |
rev 6 |
2020-04-22 |
| suricata |
ET MALWARE ProxyBox - HTTP CnC - proxy_info.php |
rev 3 |
2020-04-22 |
| suricata |
ET MALWARE Potentially Unwanted Program RebateInformerSetup.exe Download Reporting |
rev 4 |
2020-04-22 |
| suricata |
ET MALWARE Mac Flashback Checkin 2 |
rev 7 |
2020-04-22 |
| suricata |
ET EXPLOIT_KIT Likely TDS redirecting to exploit kit |
rev 5 |
2020-04-22 |
| suricata |
ET MALWARE W32.Daws/Sanny CnC Initial Beacon |
rev 4 |
2020-04-22 |
| suricata |
ET MALWARE Win32.Hupigon.dkwt Related Checkin |
rev 10 |
2020-04-22 |
| suricata |
ET HUNTING Suspicious NULL DNS Request |
rev 1 |
2020-04-22 |
| suricata |
ET WEB_SERVER SQL Injection BULK INSERT in URI to Insert File Content into Database Table |
rev 6 |
2020-04-22 |
| suricata |
ET MALWARE Request for fake postal receipt from e-mail link |
rev 3 |
2020-04-22 |
| suricata |
ET WEB_SERVER PIWIK Backdoored Version calls home |
rev 5 |
2020-04-22 |
| suricata |
ET EXPLOIT_KIT Hostile Gate landing seen with pamdql/Sweet Orange base64 |
rev 3 |
2020-04-22 |
| suricata |
ET EXPLOIT_KIT Sakura exploit kit exploit download request /nano.php |
rev 4 |
2020-04-22 |
| suricata |
ET MALWARE Densmail.com Related Trojan Checkin |
rev 6 |
2020-04-22 |
| suricata |
ET MALWARE Avzhan DDoS Bot User-Agent MyIE |
rev 8 |
2020-04-22 |
| suricata |
ET WEB_SERVER WebShell - PHP eMailer |
rev 3 |
2020-04-22 |
| suricata |
ET WEB_SPECIFIC_APPS WebC.be Fichier_a_telecharger Parameter Local File Disclosure Attempt |
rev 4 |
2020-04-22 |
| suricata |
ET MOBILE_MALWARE Android/Updtkiller Sending Device Information |
rev 3 |
2020-04-22 |
| suricata |
ET WEB_SERVER WebShell - Generic - c99shell based POST structure w/multipart |
rev 3 |
2020-04-22 |
| suricata |
ET MALWARE W32/Downloader.FakeFlashPlayer Status.Php CnC Beacon |
rev 3 |
2020-04-22 |