| snort |
ET CURRENT_EVENTS Phishing Landing via Tripod.com M2 2016-03-31 |
rev 1 |
2016-03-31 |
| snort |
ET CURRENT_EVENTS Phishing Landing via Tripod.com M1 2016-03-31 |
rev 2 |
2016-03-31 |
| snort |
ET TROJAN JS/Nemucod requesting EXE payload 2016-03-31 |
rev 1 |
2016-03-31 |
| snort |
ET CURRENT_EVENTS Phishing Landing via MyFreeSites.com M2 2016-03-31 |
rev 1 |
2016-03-31 |
| snort |
ET CURRENT_EVENTS Possible Successful Tripod.com Phish 2016-03-31 |
rev 1 |
2016-03-31 |
| snort |
ET TROJAN Win32/Backdoor.Dripion HTTP CnC Checkin |
rev 1 |
2016-03-30 |
| snort |
ET CURRENT_EVENTS RIG Exploit URI Struct March 20 2015 |
rev 2 |
2016-03-30 |
| snort |
ET POLICY External IP Address Lookup via dawhois.com |
rev 1 |
2016-03-30 |
| snort |
ET TROJAN Win32/Backdoor.Dripion External IP Check |
rev 1 |
2016-03-30 |
| snort |
ET TROJAN Win32.TreasureHunter Checkin |
rev 2 |
2016-03-29 |
| snort |
ET TROJAN Ransomware Locky CnC Beacon |
rev 4 |
2016-03-28 |
| snort |
ET TROJAN IrcBot Fantasy Name Gen |
rev 1 |
2016-03-24 |
| snort |
ET TROJAN Possible Locky Ransomware Writing Encrypted File over - SMB and SMB-DS v1 Unicode |
rev 3 |
2016-03-24 |
| snort |
ET TROJAN IrcBot Downloading .old |
rev 1 |
2016-03-24 |
| snort |
ET CURRENT_EVENTS Likely Evil EXE download from WinHttpRequest non-exe extension |
rev 1 |
2016-03-24 |
| snort |
ET TROJAN PE EXE or DLL Windows file download Text M2 |
rev 1 |
2016-03-23 |
| snort |
ET TROJAN Possible Locky Ransomware Writing Encrypted File over - SMB and SMB-DS v1 ASCII |
rev 1 |
2016-03-23 |
| snort |
ET TROJAN Ransomware Locky CnC Beacon |
rev 4 |
2016-03-21 |
| snort |
ET CURRENT_EVENTS Evil Redirect Leading to EK Mar 18 2016 |
rev 1 |
2016-03-19 |
| snort |
ET CURRENT_EVENTS Successful FR Gmail Phish M1 2016-03-15 |
rev 1 |
2016-03-15 |
| snort |
ET CURRENT_EVENTS Successful FR Gmail Phish M2 2016-03-15 |
rev 1 |
2016-03-15 |
| snort |
ET TROJAN W32/Syndicasec.Backdoor CnC Beacon |
rev 2 |
2016-03-11 |
| snort |
ET WEB_SERVER Possible Custom Content Type Manager WP Backdoor Access |
rev 3 |
2016-03-08 |
| snort |
ET POLICY PDF With Embedded File |
rev 7 |
2016-03-03 |
| snort |
ET POLICY Possible SSLv2 Negotiation in Progress Client Master Key SSL2_RC2_128_CBC_EXPORT40_WITH_MD5 |
rev 1 |
2016-03-02 |
| snort |
ET POLICY Possible SSLv2 Negotiation in Progress Client Master Key SSL2_RC4_128_WITH_MD5 |
rev 1 |
2016-03-02 |
| snort |
ET POLICY Possible SSLv2 Negotiation in Progress Client Master Key SSL2_DES_64_CBC_WITH_MD5 |
rev 1 |
2016-03-02 |
| snort |
ET POLICY Possible SSLv2 Negotiation in Progress Server Hello |
rev 1 |
2016-03-02 |
| snort |
ET TROJAN jFect HTTP CnC Checkin |
rev 1 |
2016-03-02 |
| snort |
ET POLICY Possible SSLv2 Negotiation in Progress Client Master Key SSL2_RC2_128_CBC_WITH_MD5 |
rev 1 |
2016-03-02 |
| snort |
ET POLICY Possible SSLv2 Negotiation in Progress ClientMaster Key SSL2_IDEA_128_CBC_WITH_MD5 |
rev 1 |
2016-03-02 |
| snort |
ET CURRENT_EVENTS Successful Apple Phishing 2016-03-01 M5 |
rev 1 |
2016-03-01 |
| snort |
ET CURRENT_EVENTS Successful Apple Phishing 2016-03-01 M3 |
rev 1 |
2016-03-01 |
| snort |
ET CURRENT_EVENTS Apple Phishing Landing 2016-03-01 M2 |
rev 1 |
2016-03-01 |
| snort |
ET SCAN MySQL Malicious Scanning 1 |
rev 1 |
2016-03-01 |
| snort |
ET SCAN MySQL Malicious Scanning 2 |
rev 1 |
2016-03-01 |
| snort |
ET CURRENT_EVENTS Apple Phishing Landing 2016-03-01 M3 |
rev 1 |
2016-03-01 |
| snort |
ET CURRENT_EVENTS USAA Phishing Landing 2016-02-26 |
rev 1 |
2016-02-29 |
| snort |
ET CURRENT_EVENTS EITest Evil Redirect Leading to EK Feb 01 2016 |
rev 2 |
2016-02-26 |
| snort |
ET TROJAN Likely PadCrypt Locker PKG DL |
rev 1 |
2016-02-26 |