| snort |
ET CURRENT_EVENTS Generic Goth Phishing Landing |
rev 2 |
2019-06-26 |
| snort |
ET INFO Cloned Match Dating Page - Possible Phishing Landing |
rev 2 |
2019-06-26 |
| snort |
ET INFO Cloned ABSA Bank Page - Possible Phishing Landing |
rev 2 |
2019-06-26 |
| snort |
ET WEB_SERVER Observed FxCodeShell Web Shell Password |
rev 3 |
2019-06-26 |
| snort |
ET INFO Cloned South State Bank Page - Possible Phishing Landing |
rev 2 |
2019-06-26 |
| snort |
ET TROJAN DonotGroup APT CnC Domain in DNS Lookup |
rev 2 |
2019-06-26 |
| snort |
ET INFO Cloned Godaddy Page - Possible Phishing Landing |
rev 2 |
2019-06-26 |
| snort |
ET INFO Cloned Linkedin Page - Possible Phishing Landing |
rev 2 |
2019-06-26 |
| snort |
ET INFO Cloned Yahoo Page - Possible Phishing Landing |
rev 2 |
2019-06-26 |
| snort |
ET INFO Cloned American Express Page - Possible Phishing Landing |
rev 2 |
2019-06-26 |
| snort |
ET INFO Possible Phishing Landing - Zeus365 Encoding |
rev 2 |
2019-06-26 |
| snort |
ET INFO Cloned Google Tools Page - Possible Phishing Landing |
rev 2 |
2019-06-26 |
| snort |
ET EXPLOIT ThinkPHP Attempted Bypass and Payload Retrieval |
rev 2 |
2019-06-26 |
| snort |
ET INFO Cloned NAB Page - Possible Phishing Landing |
rev 2 |
2019-06-26 |
| snort |
ET INFO Cloned Ziggo NL Page - Possible Phishing Landing |
rev 2 |
2019-06-26 |
| snort |
ET INFO Cloned Telekom / Tmobile Page - Possible Phishing Landing |
rev 2 |
2019-06-26 |
| snort |
ET INFO Cloned Impots Gouv FR Page - Possible Phishing Landing |
rev 2 |
2019-06-26 |
| snort |
ET INFO Cloned Dropbox Page - Possible Phishing Landing |
rev 2 |
2019-06-26 |
| snort |
ET INFO Cloned Discover Page - Possible Phishing Landing |
rev 2 |
2019-06-26 |
| snort |
ET TROJAN HYDSEVEN VBS CnC Host Information Checkin |
rev 2 |
2019-06-25 |
| snort |
ET EXPLOIT FCM-MB40 Attempted Remote Command Execution as Root |
rev 2 |
2019-06-24 |
| snort |
ET TROJAN Plurox CnC Domain in DNS Lookup |
rev 2 |
2019-06-20 |
| snort |
ET POLICY Unsupported/Fake Internet Explorer Version MSIE 5. |
rev 12 |
2019-06-20 |
| snort |
ET TROJAN Danabot UA Observed |
rev 2 |
2019-06-20 |
| snort |
ET TROJAN Plurox CnC Domain in DNS Lookup |
rev 2 |
2019-06-20 |
| snort |
ET EXPLOIT Geutebruck Attempted Remote Command Injection Inbound |
rev 3 |
2019-06-18 |
| snort |
ET EXPLOIT Possible OpenDreamBox Attempted Remote Command Injection Outbound |
rev 3 |
2019-06-18 |
| snort |
ET EXPLOIT Hootoo TripMate Attempted Remote Command Injection Inbound |
rev 3 |
2019-06-18 |
| snort |
ET EXPLOIT Geutebruck Attempted Remote Command Injection Outbound |
rev 3 |
2019-06-18 |
| snort |
ET EXPLOIT Possible OpenDreamBox Attempted Remote Command Injection Inbound |
rev 3 |
2019-06-18 |
| snort |
ET EXPLOIT Hootoo TripMate Attempted Remote Command Injection Outbound |
rev 3 |
2019-06-18 |
| snort |
ET TROJAN Chafer Win32/TREKX Uploading to CnC |
rev 2 |
2019-06-17 |
| snort |
ET TROJAN Chafer CnC Domain in DNS Lookup |
rev 2 |
2019-06-17 |
| snort |
ET TROJAN Chafer CnC Domain in DNS Lookup |
rev 2 |
2019-06-17 |
| snort |
ET TROJAN Chafer CnC Domain in DNS Lookup |
rev 2 |
2019-06-17 |
| snort |
ET TROJAN Packed Perl with Eval Statement |
rev 2 |
2019-06-14 |
| snort |
ET TROJAN FIN8 ShellTea CnC in DNS Lookup |
rev 2 |
2019-06-13 |
| snort |
ET TROJAN FIN8 ShellTea CnC in DNS Lookup |
rev 2 |
2019-06-13 |
| snort |
ET TROJAN FIN8 ShellTea CnC in DNS Lookup |
rev 2 |
2019-06-13 |
| snort |
ET TROJAN Win32/Vools Variant CnC Checkin |
rev 2 |
2019-06-13 |