| snort |
ET TROJAN Maldoc Second Stage VBS Downloader with URL Padding |
rev 1 |
2017-01-12 |
| snort |
ET TROJAN Suspicious UA Mozilla / 4.0 |
rev 5 |
2017-01-12 |
| snort |
ET TROJAN Linux/Venom CnC Beacon |
rev 1 |
2017-01-11 |
| snort |
ET INFO ATF file in HTTP Flowbit Set |
rev 1 |
2017-01-10 |
| snort |
ET CURRENT_EVENTS Successful USAA Phish 2016-11-22 |
rev 2 |
2017-01-09 |
| snort |
ET EXPLOIT Possible Malicious NAT-PMP Response to External Network |
rev 3 |
2017-01-06 |
| snort |
ET INFO PDF Containing Subform with JavaScript |
rev 4 |
2017-01-06 |
| snort |
ET CURRENT_EVENTS Successful Bradesco Bank Phish M1 Jan 05 2017 |
rev 1 |
2017-01-05 |
| snort |
ET TROJAN Blackmoon/Banbra Configuration Request M2 |
rev 1 |
2017-01-04 |
| snort |
ET TROJAN MRCR1 Ransomware Checkin M1 |
rev 1 |
2017-01-03 |
| snort |
ET TROJAN MRCR1 Ransomware Checkin M2 |
rev 1 |
2017-01-03 |
| snort |
ET CURRENT_EVENTS Successful Ebay Phish M1 2016-12-29 |
rev 1 |
2016-12-29 |
| snort |
ET TROJAN Possible Tinba DGA NXDOMAIN Responses |
rev 2 |
2016-12-29 |
| snort |
ET CURRENT_EVENTS Successful Ebay Phish M2 2016-12-29 |
rev 1 |
2016-12-29 |
| snort |
ET CURRENT_EVENTS Successful Wells Fargo Phish M1 2016-12-29 |
rev 1 |
2016-12-29 |
| snort |
ET POLICY Suspicious User-Agent Containing .exe |
rev 15 |
2016-12-29 |
| snort |
ET CURRENT_EVENTS Successful Banamex Bank Phish 2016-12-29 |
rev 1 |
2016-12-29 |
| snort |
ET CURRENT_EVENTS Successful Gmail Phish 2016-09-30 |
rev 2 |
2016-12-29 |
| snort |
ET CURRENT_EVENTS Successful Chase Phish Dec 29 2016 |
rev 1 |
2016-12-29 |
| snort |
ET SCAN Acunetix scan in progress acunetix_wvs_security_test in http_uri |
rev 1 |
2016-12-28 |
| snort |
ET CURRENT_EVENTS Successful Webmail Account Upgrade Phish 2016-12-27 |
rev 1 |
2016-12-28 |
| snort |
ET SCAN Acunetix scan in progress acunetix variable in http_uri |
rev 1 |
2016-12-28 |
| snort |
ET EXPLOIT Possible CVE-2016-10033 PHPMailer RCE Attempt |
rev 1 |
2016-12-27 |
| snort |
ET CURRENT_EVENTS Successful Windows Live Phish 2016-12-23 |
rev 1 |
2016-12-23 |
| snort |
ET TROJAN JS/WSF Downloader Dec 08 2016 M4 |
rev 2 |
2016-12-23 |
| snort |
ET CURRENT_EVENTS Successful Google Drive Phish 2016-12-22 |
rev 1 |
2016-12-22 |
| snort |
ET TROJAN Possible Linux.Mirai DaHua Default Credentials Login |
rev 1 |
2016-12-20 |
| snort |
ET CURRENT_EVENTS Successful Dubai Islamic Internet Bank Phish 2016-12-20 |
rev 1 |
2016-12-20 |
| snort |
ET CURRENT_EVENTS Successful Etisalat Phish 2016-12-20 |
rev 1 |
2016-12-20 |
| snort |
ET TROJAN Win32/Braincrypt Ransomware CnC Checkin |
rev 1 |
2016-12-20 |
| snort |
ET TROJAN AgentTesla PWS HTTP CnC Checkin |
rev 3 |
2016-12-19 |
| snort |
ET CURRENT_EVENTS Successful PDF Online Phish 2016-12-19 |
rev 1 |
2016-12-19 |
| snort |
ET CURRENT_EVENTS Successful Google Drive Phish 2016-10-12 |
rev 2 |
2016-12-19 |
| snort |
ET TROJAN TeleBots VBS Backdoor CnC Beacon 2 |
rev 1 |
2016-12-16 |
| snort |
ET CURRENT_EVENTS Successful Linkedin Phish 2016-11-18 |
rev 2 |
2016-12-16 |
| snort |
ET WEB_CLIENT Microsoft Edge SmartScreen Page Spoof Attempt Dec 16 2016 |
rev 1 |
2016-12-16 |
| snort |
ET TROJAN TeleBots BCS-server CnC Beacon |
rev 1 |
2016-12-15 |
| snort |
ET TROJAN TeleBots VBS Backdoor CnC Beacon 1 |
rev 1 |
2016-12-15 |
| snort |
ET CURRENT_EVENTS Successful Mailbox Deactivation Phish 2016-12-15 |
rev 1 |
2016-12-15 |
| snort |
ET CURRENT_EVENTS Mailbox Deactivation Phishing Landing 2016-12-15 |
rev 1 |
2016-12-15 |