| snort |
ET TROJAN CASHY200 CnC Domain in DNS Lookup |
rev 2 |
2019-10-10 |
| snort |
ET MOBILE_MALWARE Android/Geost CnC Checkin |
rev 2 |
2019-10-08 |
| snort |
ET TROJAN DonotGroup CnC Domain Observed in DNS Query |
rev 2 |
2019-10-08 |
| suricata |
ET EXPLOIT Possible CVE-2014-6271 exploit attempt via malicious DNS |
rev 2 |
2019-10-08 |
| suricata |
ET INFO Splashtop Remote Control Session Start Request |
rev 2 |
2019-10-08 |
| suricata |
ET SCAN NMAP OS Detection Probe |
rev 4 |
2019-10-08 |
| suricata |
ET MALWARE TrochilusRAT CnC Beacon 2 |
rev 3 |
2019-10-08 |
| suricata |
ET WEB_SERVER Possible bash shell piped to dev udp Inbound to WebServer |
rev 4 |
2019-10-08 |
| suricata |
ET SCAN SipCLI VOIP Scan |
rev 3 |
2019-10-08 |
| suricata |
ET MALWARE PowerShell/Agent.A DNS File Transfer CnC Beacon |
rev 3 |
2019-10-08 |
| suricata |
ET EXPLOIT Possible OpenVPN CVE-2014-6271 attempt |
rev 3 |
2019-10-08 |
| suricata |
ET MALWARE W32/Jabberbot.A Trednet XMPP CnC Beacon |
rev 2 |
2019-10-08 |
| suricata |
ET EXPLOIT Possible CVE-2014-6271 exploit attempt via malicious DHCP ACK |
rev 5 |
2019-10-08 |
| suricata |
ET SCAN MySQL Malicious Scanning 2 |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE US-CERT TA14-353A Lightweight Backdoor 9 |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE US-CERT TA14-353A Lightweight Backdoor 8 |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE TinyLoader.B2 Checkin x64 |
rev 2 |
2019-10-08 |
| suricata |
GPL SNMP SNMP trap Format String detected |
rev 5 |
2019-10-08 |
| suricata |
ET MALWARE Suspicious X-mailer Synapse |
rev 3 |
2019-10-08 |
| suricata |
ET SCAN Nessus Netbios Scanning |
rev 3 |
2019-10-08 |
| suricata |
ET INFO WinUpack Modified PE Header Outbound |
rev 7 |
2019-10-08 |
| suricata |
ET WEB_SPECIFIC_APPS JoomSocial AvatarUpload RCE |
rev 9 |
2019-10-08 |
| suricata |
ET INFO WinUpack Modified PE Header Inbound |
rev 6 |
2019-10-08 |
| suricata |
ET MALWARE Windows WMIC SERVICE get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE Trojan.SpamBanker Report via SMTP |
rev 2 |
2019-10-08 |
| suricata |
ET EXPLOIT SolusVM 1.13.03 Access to solusvmc-node setuid bin |
rev 4 |
2019-10-08 |
| suricata |
GPL SNMP private access udp |
rev 12 |
2019-10-08 |
| suricata |
GPL SNMP PROTOS test-suite-trap-app attempt |
rev 6 |
2019-10-08 |
| suricata |
ET MALWARE ZhCAT.HackTool Operation Cleaver HTTP CnC Beacon |
rev 4 |
2019-10-08 |
| suricata |
ET MALWARE Win32/Hikit Server Authentication Response |
rev 3 |
2019-10-08 |
| suricata |
ET MALWARE Linux/Xnote Keep-Alive |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE US-CERT TA14-353A Lightweight Backdoor 10 |
rev 3 |
2019-10-08 |
| suricata |
ET MALWARE Mini/Cosmic Duke variant FTP upload |
rev 3 |
2019-10-08 |
| suricata |
ET HUNTING Suspicious X-mailer Synapse Inbound to SMTP Server |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE TinyLoader.A Checkin x64 |
rev 2 |
2019-10-08 |
| suricata |
ET SHELLCODE Linux/x86-64 - Polymorphic Flush IPTables Shellcode |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE US-CERT TA14-353A Lightweight Backdoor 4 |
rev 2 |
2019-10-08 |
| suricata |
GPL SHELLCODE x86 0xEB0C NOOP |
rev 9 |
2019-10-08 |
| suricata |
ET SHELLCODE Linux/x86-64 - Reverse Shell Shellcode |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE US-CERT TA14-353A Lightweight Backdoor 6 |
rev 2 |
2019-10-08 |