| snort |
ET WEB_CLIENT Fake Virus Phone Scam Landing Mar 09 2017 |
rev 1 |
2017-03-09 |
| snort |
ET TROJAN Spora Ransomware Checkin |
rev 2 |
2017-03-09 |
| snort |
ET MOBILE_MALWARE Android/Comll.Banker RAT CnC Beacon |
rev 2 |
2017-03-09 |
| snort |
ET CURRENT_EVENTS Shared Document Base64 Phishing Landing 2016-01-20 |
rev 5 |
2017-03-08 |
| snort |
ET CURRENT_EVENTS Docusign Phishing Landing Mar 08 2017 |
rev 1 |
2017-03-08 |
| snort |
ET WEB_SPECIFIC_APPS Possible Drupal Object Unserialize Exploit Attempt |
rev 1 |
2017-03-08 |
| snort |
ET CURRENT_EVENTS Successful Google Drive Phish M1 2016-09-01 |
rev 2 |
2017-03-07 |
| snort |
ET CURRENT_EVENTS Successful Google Drive Phish 2016-10-14 |
rev 2 |
2017-03-07 |
| snort |
ET WEB_CLIENT Android Fake AV Download Landing Mar 06 2017 |
rev 1 |
2017-03-06 |
| snort |
ET WEB_CLIENT SUSPICIOUS Local file read using read protocol |
rev 1 |
2017-03-06 |
| snort |
ET INFO Suspicious VNC Remote Admin Request |
rev 1 |
2017-03-01 |
| snort |
ET CURRENT_EVENTS Successful Chase Phish 2016-10-07 |
rev 2 |
2017-03-01 |
| sigma |
Relevant ClamAV Message |
stable |
2017-03-01 |
| snort |
ET TROJAN Pteranodon Backdoor CnC POST |
rev 1 |
2017-02-28 |
| snort |
ET TROJAN Pteranodon Variant 2 Backdoor Checkin |
rev 1 |
2017-02-28 |
| snort |
ET TROJAN Pteranodon Variant 1 Backdoor Checkin |
rev 1 |
2017-02-28 |
| snort |
ET TROJAN Pteranodon Backdoor Checkin |
rev 1 |
2017-02-28 |
| snort |
ET TROJAN Gamaredon File Stealer POST |
rev 1 |
2017-02-28 |
| snort |
ET TROJAN Pteranodon Variant 3 Backdoor Checkin |
rev 1 |
2017-02-28 |
| snort |
ET CURRENT_EVENTS RIG EK Landing Feb 26 2016 |
rev 2 |
2017-02-27 |
| snort |
ET CURRENT_EVENTS Dropbox Phishing Landing Feb 27 2017 |
rev 1 |
2017-02-27 |
| snort |
ET WEB_CLIENT Common Paypal Phishing URI Feb 24 2017 |
rev 1 |
2017-02-24 |
| snort |
ET WEB_CLIENT Paypal Phishing Redirect M1 Feb 24 2017 |
rev 1 |
2017-02-24 |
| snort |
ET INFO Opera Adblocker Update Flowbit Set |
rev 1 |
2017-02-22 |
| snort |
ET CURRENT_EVENTS Dropbox Shared Document Phishing Landing Feb 21 2017 |
rev 1 |
2017-02-21 |
| sigma |
Addition of SID History to Active Directory Object |
stable |
2017-02-19 |
| snort |
ET CURRENT_EVENTS Successful Apple Account Phish Feb 17 2017 |
rev 1 |
2017-02-17 |
| snort |
ET TROJAN CozyCar V2 CnC Beacon |
rev 1 |
2017-02-17 |
| snort |
ET TROJAN CozyCar CnC Beacon |
rev 1 |
2017-02-17 |
| snort |
ET TROJAN APT29 Implant8 - Evil Twitter Callback |
rev 1 |
2017-02-17 |
| snort |
ET TROJAN Miniduke Variant CnC Beacon via WebDAV |
rev 1 |
2017-02-16 |
| snort |
ET TROJAN MAGICHOUND.RETRIEVER CnC Beacon |
rev 1 |
2017-02-16 |
| snort |
ET TROJAN MAGICHOUND.FETCH Retrieving Malicious PowerShell |
rev 1 |
2017-02-16 |
| snort |
ET TROJAN MAGICHOUND.LEASH IRC CnC Beacon |
rev 1 |
2017-02-16 |
| snort |
ET TROJAN Likely MAGICHOUND.FETCH Receiving PowerSploit PowerShell over HTTP |
rev 1 |
2017-02-16 |
| snort |
ET TROJAN CryptoShield Ransomware Checkin |
rev 2 |
2017-02-16 |
| snort |
ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Femas.b Apps List Exfil |
rev 1 |
2017-02-16 |
| snort |
ET CURRENT_EVENTS Successful Outlook Phish 2016-08-31 |
rev 2 |
2017-02-15 |
| snort |
ET CURRENT_EVENTS Microsoft Live External Link Phishing Landing M2 Feb 14 2017 |
rev 1 |
2017-02-14 |
| snort |
ET TELNET busybox MEMES Hackers - Possible Brute Force Attack |
rev 1 |
2017-02-14 |