| snort |
ET MOBILE_MALWARE NSO Related Domain 16 |
rev 1 |
2018-08-02 |
| snort |
ET TROJAN Win32/Bisonal DNS Lookup 2 |
rev 2 |
2018-07-31 |
| snort |
ET TROJAN Win32/Bisonal RC4 Encrypted 8 Byte Static CnC Checkin |
rev 2 |
2018-07-31 |
| snort |
ET TROJAN Win32/Bisonal DNS Lookup 3 |
rev 2 |
2018-07-31 |
| snort |
ET TROJAN Win32/Bisonal DNS Lookup 1 |
rev 2 |
2018-07-31 |
| snort |
ET POLICY IP Check whatismyip.com Automation Page |
rev 4 |
2018-07-31 |
| snort |
ET TROJAN Win32/Bisonal DNS Lookup 5 |
rev 2 |
2018-07-31 |
| snort |
ET TROJAN Win32/Bisonal DNS Lookup 4 |
rev 2 |
2018-07-31 |
| snort |
ET CURRENT_EVENTS Paypal Phishing Landing 2018-07-30 |
rev 2 |
2018-07-30 |
| snort |
ET CURRENT_EVENTS Volexity - JS Sniffer Data Theft Beacon Detected |
rev 3 |
2018-07-30 |
| snort |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 12 |
rev 1 |
2018-07-25 |
| snort |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 16 |
rev 1 |
2018-07-25 |
| snort |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 7 |
rev 1 |
2018-07-25 |
| snort |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 8 |
rev 1 |
2018-07-25 |
| snort |
ET MOBILE_MALWARE Android Golden Rat Checkin |
rev 1 |
2018-07-25 |
| snort |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 10 |
rev 1 |
2018-07-25 |
| snort |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 6 |
rev 1 |
2018-07-25 |
| snort |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 11 |
rev 1 |
2018-07-25 |
| snort |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 15 |
rev 1 |
2018-07-25 |
| snort |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 9 |
rev 1 |
2018-07-25 |
| snort |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 13 |
rev 1 |
2018-07-25 |
| snort |
ET TROJAN OilRig QUADAGENT CnC Domain in SNI |
rev 2 |
2018-07-25 |
| snort |
ET TROJAN OilRig QUADAGENT DNS Tunneling |
rev 2 |
2018-07-25 |
| snort |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 14 |
rev 1 |
2018-07-25 |
| snort |
ET EXPLOIT Remote Command Execution via Android Debug Bridge 2 |
rev 1 |
2018-07-24 |
| snort |
ET EXPLOIT Remote Command Execution via Android Debug Bridge |
rev 1 |
2018-07-24 |
| snort |
ET CURRENT_EVENTS [eSentire] DHL Phish Landing July 24 2018 |
rev 1 |
2018-07-24 |
| snort |
ET EXPLOIT MVPower DVR Shell UCE |
rev 2 |
2018-07-23 |
| snort |
ET EXPLOIT MVPower DVR Shell UCE MSF Check |
rev 1 |
2018-07-23 |
| snort |
ET EXPLOIT Multiple CCTV-DVR Vendors RCE |
rev 1 |
2018-07-23 |
| snort |
ET TROJAN AZORult Variant.4 Checkin M2 |
rev 2 |
2018-07-23 |
| snort |
ET CURRENT_EVENTS LinkedIn Phishing Landing 2017-07-20 |
rev 2 |
2018-07-20 |
| snort |
ET ATTACK_RESPONSE passwd file Outbound from WEB SERVER Linux |
rev 2 |
2018-07-20 |
| snort |
ET CURRENT_EVENTS Netflix Phishing Landing 2017-07-20 |
rev 2 |
2018-07-20 |
| snort |
ET WEB_SPECIFIC_APPS ELF file magic plain Inbound Web Servers Likely Command Execution 12 |
rev 2 |
2018-07-19 |
| snort |
ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 Hex Escape Inbound Web Servers Likely Command Execution 10 |
rev 1 |
2018-07-19 |
| snort |
ET WEB_SPECIFIC_APPS ELF file magic plain Inbound Web Servers Likely Command Execution 11 |
rev 2 |
2018-07-19 |
| snort |
ET CURRENT_EVENTS GitLab Phishing Landing 2018-07-19 |
rev 2 |
2018-07-19 |
| snort |
ET CURRENT_EVENTS Badoo Phishing Landing 2018-07-19 |
rev 2 |
2018-07-19 |
| snort |
ET CURRENT_EVENTS Github Phishing Landing 2018-07-19 |
rev 2 |
2018-07-19 |