| snort |
ET TROJAN Observed DNS Query to Ursnif SAIGON Variant CnC Domain |
rev 2 |
2020-01-10 |
| snort |
ET TROJAN Observed DNS Query to Ursnif SAIGON Variant CnC Domain |
rev 2 |
2020-01-10 |
| snort |
ET TROJAN Observed DNS Query to Ursnif SAIGON Variant CnC Domain |
rev 2 |
2020-01-10 |
| snort |
ET TROJAN Observed DNS Query to Ursnif SAIGON Variant CnC Domain |
rev 2 |
2020-01-10 |
| snort |
ET TROJAN DonotGroup CnC Domain Observed in DNS Query |
rev 2 |
2020-01-10 |
| snort |
ET TROJAN Observed DNS Query to Ursnif SAIGON Variant CnC Domain |
rev 2 |
2020-01-10 |
| snort |
ET TROJAN APT/TransparentTribe CnC Checkin |
rev 2 |
2020-01-09 |
| snort |
ET TROJAN Win32/PSW.QQPass.OZV Variant Checkin |
rev 2 |
2020-01-09 |
| snort |
ET TROJAN APT/TransparentTribe Style Request |
rev 2 |
2020-01-09 |
| snort |
ET TROJAN Vidar/Arkei/Megumin/Oski Stealer Data Exfil |
rev 2 |
2020-01-08 |
| snort |
ET TROJAN Legion Loader Activity Observed |
rev 2 |
2020-01-08 |
| snort |
ET TROJAN Win32/Rarog Stealer CnC Checkin |
rev 2 |
2020-01-08 |
| snort |
ET TROJAN Magician/M461c14n Ransomware CnC Checkin |
rev 2 |
2020-01-08 |
| snort |
ET TROJAN DonotGroup Staging Domain Observed in DNS Query |
rev 2 |
2020-01-08 |
| snort |
ET TROJAN AstroBot CnC Activity |
rev 2 |
2020-01-07 |
| snort |
ET TROJAN Observed Magecart CnC Domain in TLS SNI |
rev 2 |
2020-01-06 |
| snort |
ET TROJAN Observed Magecart CnC Domain in TLS SNI |
rev 2 |
2020-01-06 |
| snort |
ET TROJAN DonotGroup CnC Domain Observed in DNS Query |
rev 2 |
2020-01-06 |
| snort |
ET TROJAN Magecart CnC Domain Observed in DNS Query |
rev 2 |
2020-01-06 |
| snort |
ET TROJAN Zeoticus Ransomware CnC Activity |
rev 2 |
2020-01-06 |
| snort |
ET TROJAN Magecart CnC Domain Observed in DNS Query |
rev 2 |
2020-01-06 |
| suricata |
ET MALWARE Observed Magecart CnC Domain in TLS SNI |
rev 1 |
2020-01-06 |
| suricata |
ET MALWARE Zeoticus Ransomware CnC Activity |
rev 2 |
2020-01-06 |
| suricata |
ET MALWARE Observed Magecart CnC Domain in TLS SNI |
rev 1 |
2020-01-06 |
| snort |
ET TROJAN Arechclient2 Backdoor CnC Checkin |
rev 1 |
2020-01-02 |
| snort |
ET TROJAN Arechclient2 Backdoor CnC Keep-Alive |
rev 2 |
2020-01-02 |
| snort |
ET TROJAN Arechclient2 Backdoor/SecTopRAT CnC Init |
rev 2 |
2020-01-02 |
| snort |
ET TROJAN Observed Buran Ransomware UA |
rev 3 |
2020-01-02 |
| snort |
ET TROJAN Lampion CnC Activity |
rev 2 |
2020-01-02 |
| snort |
ET TROJAN Observed Buran Ransomware UA |
rev 3 |
2020-01-02 |
| snort |
ET TROJAN Observed Buran Ransomware UA |
rev 2 |
2020-01-02 |
| snort |
ET TROJAN Kimsuky Operation Blue Estimate CnC Activity |
rev 2 |
2020-01-02 |
| suricata |
ET MALWARE Lampion CnC Activity |
rev 1 |
2020-01-02 |
| suricata |
ET MALWARE Kimsuky Operation Blue Estimate CnC Activity |
rev 1 |
2020-01-02 |
| suricata |
ET MALWARE Arechclient2 Backdoor CnC Checkin |
rev 1 |
2020-01-02 |
| snort |
ET TROJAN Win32/ViSystem CnC Checkin |
rev 2 |
2019-12-31 |
| snort |
ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound |
rev 2 |
2019-12-31 |
| snort |
ET TROJAN Magecart CnC Domain Observed in DNS Query |
rev 2 |
2019-12-30 |
| snort |
ET MALWARE Win32/DownloadAssistant.Q Variant Checkin |
rev 2 |
2019-12-30 |
| snort |
ET TROJAN Observed Magecart CnC Domain in TLS SNI |
rev 2 |
2019-12-30 |