| snort |
ET TROJAN Win32/Varenyky Spambot CnC in DNS Query |
rev 2 |
2019-08-08 |
| snort |
ET TROJAN Win32/Varenyky Spambot CnC in DNS Query |
rev 2 |
2019-08-08 |
| snort |
ET TROJAN Win32/Varenyky Spambot CnC in DNS Query |
rev 2 |
2019-08-08 |
| snort |
ET CURRENT_EVENTS Possible Injected JS Form Stealer Checking Page Contents M1 |
rev 2 |
2019-08-07 |
| snort |
ET CURRENT_EVENTS Possible FFSniff Inject Observed |
rev 2 |
2019-08-07 |
| snort |
ET TROJAN Win32/Onliner CnC Checkin |
rev 2 |
2019-08-06 |
| snort |
ET TROJAN Win32/Onliner Receiving Commands from CnC |
rev 2 |
2019-08-06 |
| snort |
ET MOBILE_MALWARE Trojan.AndroidOS.TimpDoor Module Download Request |
rev 2 |
2019-08-06 |
| snort |
ET TROJAN Win32/Onliner Template 1 Active - Malicious Outbound Email Spam |
rev 2 |
2019-08-06 |
| snort |
ET TROJAN Win32/Onliner Requesting Additional Modules |
rev 2 |
2019-08-06 |
| snort |
ET TROJAN Covenant Framework Default HTTP Beacon |
rev 2 |
2019-08-04 |
| snort |
ET TROJAN Covenant Framework HTTP Hello World Server Response |
rev 2 |
2019-08-04 |
| snort |
ET CURRENT_EVENTS Successful Generic Credit Card Information Phish 2019-08-02 |
rev 2 |
2019-08-02 |
| snort |
ET CURRENT_EVENTS Obfuscated LordEK Landing M2 |
rev 2 |
2019-08-02 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET CURRENT_EVENTS Possible Protonmail Phishing Domain in DNS Query |
rev 2 |
2019-08-01 |
| snort |
ET POLICY Windows Update P2P Activity |
rev 2 |
2019-07-31 |
| snort |
ET TROJAN Win32/Phorpiex CnC Checkin |
rev 2 |
2019-07-31 |
| snort |
ET TROJAN Win32/Phorpiex Template 5 Active - Outbound Malicious Email Spam |
rev 2 |
2019-07-31 |
| suricata |
ET INFO Windows Update P2P Activity |
rev 2 |
2019-07-31 |
| suricata |
ET MALWARE Win32/Phorpiex Template 5 Active - Outbound Malicious Email Spam |
rev 1 |
2019-07-31 |
| snort |
ET TROJAN Possible ICMP Backdoor Tunnel Command - whoami |
rev 1 |
2019-07-29 |
| snort |
ET CURRENT_EVENTS Successful Generic Adobe Phish 2019-07-29 |
rev 2 |
2019-07-29 |
| suricata |
ET MALWARE Possible ICMP Backdoor Tunnel Command - whoami |
rev 1 |
2019-07-29 |
| snort |
ET DNS Query for .cc TLD |
rev 2 |
2019-07-26 |
| snort |
ET DNS Query for .to TLD |
rev 2 |
2019-07-26 |
| snort |
ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE KeyBoy CnC Beacon |
rev 1 |
2019-07-26 |