| suricata |
ET MALWARE W32/Taidoor.Backdoor CnC Checkin With Default Substitute MAC Address Field |
rev 3 |
2020-04-21 |
| suricata |
ET MALWARE Driveby Exploit Attempt Often to Install Monkif |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE Koobface Trojan HTTP Post Checkin |
rev 8 |
2020-04-21 |
| suricata |
ET MALWARE SpyEye Checkin version 1.3.25 or later |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE W32/118GotYourNo Reporting to CnC |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE Common Trojan HTTP GET Logging |
rev 7 |
2020-04-21 |
| suricata |
ET MALWARE Win32.Lager Trojan Initial Checkin |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE Win32.PEx.Delphi.1151005043 Post-infection Checkin |
rev 4 |
2020-04-21 |
| suricata |
ET INFO Http Client Body contains pwd= in cleartext |
rev 4 |
2020-04-21 |
| suricata |
ET MALWARE W32/Backdoor.BlackMonay Checkin |
rev 4 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS pfile file.php id Parameter UPDATE SET SQL Injection Attempt |
rev 4 |
2020-04-21 |
| suricata |
ET MALWARE Optix Pro Trojan/Keylogger Reporting Installation via HTTP-Email Post |
rev 8 |
2020-04-21 |
| snort |
ET TROJAN Targeted Activity - CnC Domain in SNI |
rev 2 |
2020-04-20 |
| snort |
ET WEB_SERVER Generic PHP Mailer Accessed on Internal Compromised Server |
rev 2 |
2020-04-20 |
| suricata |
ET MOBILE_MALWARE XML Style POST Of IMSI International Mobile Subscriber Identity |
rev 3 |
2020-04-20 |
| suricata |
ET WEB_SPECIFIC_APPS Wordpress plugin Flash Album Gallery pid Parameter UNION SELECT SQL Injection Attempt |
rev 3 |
2020-04-20 |
| suricata |
ET WEB_SPECIFIC_APPS jbShop e107 CMS plugin item_id parameter UPDATE SET SQL Injection Attempt |
rev 4 |
2020-04-20 |
| suricata |
ET WEB_CLIENT Microsoft Visio 2003 mfc71enu.dll DLL Loading Arbitrary Code Execution Attempt |
rev 3 |
2020-04-20 |
| suricata |
ET MOBILE_MALWARE Android.AdSms Retrieving XML File from CnC Server |
rev 5 |
2020-04-20 |
| suricata |
ET HUNTING Suspicious HTTP Request for gift.exe |
rev 3 |
2020-04-20 |
| suricata |
ET WEB_SERVER PHP Possible data Remote File Inclusion Attempt |
rev 5 |
2020-04-20 |
| suricata |
ET WEB_SPECIFIC_APPS Joomla com_dshop Component UPDATE SET SQL Injection Attempt |
rev 4 |
2020-04-20 |
| suricata |
ET MOBILE_MALWARE Android/GoldDream Task Information Retrieval |
rev 4 |
2020-04-20 |
| suricata |
ET WEB_SPECIFIC_APPS PHP link Directory sbcat_id Parameter UPDATE SET SQL Injection Attempt |
rev 3 |
2020-04-20 |
| suricata |
ET WEB_SERVER PHP Possible phar Remote File Inclusion Attempt |
rev 6 |
2020-04-20 |
| suricata |
ET WEB_SPECIFIC_APPS TCExam tce_xml_user_results.php script UNION SELECT SQL Injection Attempt |
rev 3 |
2020-04-20 |
| suricata |
ET WEB_SPECIFIC_APPS Joomla Community component userid parameter UPDATE SET SQL Injection Attempt |
rev 4 |
2020-04-20 |
| suricata |
ET SCAN SQLix SQL Injection Vector Scan |
rev 7 |
2020-04-20 |
| suricata |
ET INFO Cleartext WordPress Login |
rev 4 |
2020-04-20 |
| suricata |
ET WEB_SERVER PHP Possible ssh2 Remote File Inclusion Attempt |
rev 5 |
2020-04-20 |
| suricata |
ET WEB_SPECIFIC_APPS Immophp annonce parameter INSERT INTO SQL Injection Attempt |
rev 3 |
2020-04-20 |
| suricata |
ET WEB_SPECIFIC_APPS KLINK txtCodiInfo parameter SELECT FROM SQL Injection Attempt |
rev 4 |
2020-04-20 |
| suricata |
ET WEB_SPECIFIC_APPS TCExam tce_xml_user_results.php script INSERT INTO SQL Injection Attempt |
rev 3 |
2020-04-20 |
| suricata |
ET MALWARE W32/Skintrim CnC Checkin |
rev 3 |
2020-04-20 |
| suricata |
ET WEB_SPECIFIC_APPS phpRS id parameter UPDATE SET SQL Injection Attempt |
rev 4 |
2020-04-20 |
| suricata |
ET WEB_SERVER PHP Possible php Remote File Inclusion Attempt |
rev 5 |
2020-04-20 |
| suricata |
ET WEB_SPECIFIC_APPS Joomla Community component userid parameter UNION SELECT SQL Injection Attempt |
rev 4 |
2020-04-20 |
| suricata |
ET INFO HTTP Request to a *.dlinkddns.com domain |
rev 4 |
2020-04-20 |
| suricata |
ET WEB_SPECIFIC_APPS Nuke Evolution Xtreme pid Parameter SELECT FROM SQL Injection Attempt |
rev 4 |
2020-04-20 |
| suricata |
ET WEB_SPECIFIC_APPS Joomla Component com_hello SELECT FROM SQL Injection Attempt |
rev 3 |
2020-04-20 |