| snort |
ET CURRENT_EVENTS Possible ReactorBot .bin Download |
rev 1 |
2016-05-27 |
| snort |
ET TROJAN Joanap CnC Checkin |
rev 2 |
2016-05-27 |
| snort |
ET CURRENT_EVENTS Successful Paypal Phish 2016-05-26 |
rev 1 |
2016-05-26 |
| snort |
ET TROJAN Hawkeye Keylogger SMTP Beacon |
rev 2 |
2016-05-26 |
| snort |
ET WEB_SERVER Unusually Fast HTTP Requests With Referer Url Matching DoS Tool |
rev 3 |
2016-05-25 |
| snort |
ET TROJAN Possible CryptXXX Ransomware Renaming Encrypted File SMB v1 Unicode |
rev 1 |
2016-05-25 |
| snort |
ET TROJAN Possible CryptXXX Ransomware Renaming Encrypted File SMB v1 ASCII |
rev 1 |
2016-05-25 |
| snort |
ET CURRENT_EVENTS Successful Citizenbank Phish 2016-05-24 M1 |
rev 1 |
2016-05-24 |
| snort |
ET CURRENT_EVENTS Successful Citizenbank Phish 2016-05-24 M2 |
rev 1 |
2016-05-24 |
| snort |
ET EXPLOIT CVE-2016-1287 Public Exploit ShellCode |
rev 1 |
2016-05-18 |
| snort |
ET TROJAN Generic gate .php GET with minimal headers |
rev 1 |
2016-05-18 |
| snort |
ET CURRENT_EVENTS Mailbox Update Phishing Landing M1 2016-05-16 |
rev 1 |
2016-05-16 |
| snort |
ET CURRENT_EVENTS Mailbox Update Phishing Landing M2 2016-05-16 |
rev 1 |
2016-05-16 |
| snort |
ET POLICY IRC DCC file transfer request on non-std port |
rev 13 |
2016-05-12 |
| snort |
ET INFO Flowbit set for POST to Quicken Updater |
rev 1 |
2016-05-11 |
| snort |
ET CURRENT_EVENTS DRIVEBY Router DNS Changer Apr 07 2015 M2 |
rev 3 |
2016-05-11 |
| snort |
ET CURRENT_EVENTS Successful Gmail Account Update Phish 2016-05-10 |
rev 1 |
2016-05-10 |
| snort |
ET EXPLOIT Possible Internet Explorer VBscript failure to handle error case information disclosure CVE-2014-6332 Common Construct M2 |
rev 1 |
2016-05-06 |
| snort |
ET TROJAN Win32/Upgilf CnC Beacon |
rev 1 |
2016-05-05 |
| snort |
ET TROJAN Backdoor.Darpapox/Jaku Initial C2 Checkin |
rev 1 |
2016-05-04 |
| snort |
ET WEB_SPECIFIC_APPS Magento Shoplift Exploit Inbound |
rev 1 |
2016-05-03 |
| snort |
ET CURRENT_EVENTS Successful Craigslist Phish 2016-04-25 |
rev 1 |
2016-04-28 |
| snort |
ET TROJAN Ransomware Locky CnC Beacon 2 |
rev 1 |
2016-04-27 |
| snort |
ET CURRENT_EVENTS Adobe Online Document Phishing Landing M2 2016-04-25 |
rev 1 |
2016-04-25 |
| snort |
ET TROJAN APT.Fwits CnC Beacon M1 |
rev 1 |
2016-04-25 |
| snort |
ET TROJAN Blackmoon/Banbra Configuration Request |
rev 1 |
2016-04-25 |
| snort |
ET WORM TheMoon.linksys.router 2 |
rev 4 |
2016-04-25 |
| snort |
ET TROJAN APT.Fwits CnC Beacon M2 |
rev 1 |
2016-04-25 |
| snort |
ET CURRENT_EVENTS Successful Adobe Online Document Phish 2016-04-25 |
rev 1 |
2016-04-25 |
| snort |
ET WORM TheMoon.linksys.router 3 |
rev 3 |
2016-04-25 |
| snort |
ET EXPLOIT Linksys Router Unauthenticated Remote Code Execution |
rev 1 |
2016-04-25 |
| snort |
ET POLICY Windows Quicktime User-Agent EOL With Known Bugs |
rev 1 |
2016-04-18 |
| snort |
ET POLICY HotSpotShield Activity |
rev 2 |
2016-04-18 |
| snort |
ET TROJAN W32/Virus-Encoder Ransomware Checkin |
rev 1 |
2016-04-15 |
| snort |
ET CURRENT_EVENTS Email System Manager Phishing Landing 2016-04-12 |
rev 1 |
2016-04-13 |
| snort |
ET CURRENT_EVENTS Successful Email System Manager Phish 2016-04-13 |
rev 1 |
2016-04-13 |
| snort |
ET INFO PhishMe.com Phishing Exercise - Client Plugins |
rev 1 |
2016-04-13 |
| snort |
ET MOBILE_MALWARE Android/Opfake.A Country CnC Beacon |
rev 4 |
2016-04-08 |
| snort |
ET EXPLOIT Quanta LTE Router UDP Backdoor Activation Attempt |
rev 1 |
2016-04-05 |
| snort |
ET EXPLOIT Quanta LTE Router Information Disclosure Exploit Attempt |
rev 1 |
2016-04-05 |