| snort |
ET TROJAN XcodeGhost CnC Checkin |
rev 1 |
2015-09-23 |
| snort |
ET TROJAN Ursnif Variant CnC Beacon 3 |
rev 1 |
2015-09-23 |
| snort |
ET CURRENT_EVENTS Successful Amazon Phish 2015-09-22 |
rev 1 |
2015-09-22 |
| snort |
ET CURRENT_EVENTS Successful Battle.net Phish 2015-09-22 |
rev 1 |
2015-09-22 |
| snort |
ET CURRENT_EVENTS Possible Spartan/Nuclear EK Payload |
rev 2 |
2015-09-18 |
| snort |
ET TROJAN Win32/Spy.Odlanor CnC Checkin |
rev 1 |
2015-09-18 |
| snort |
ET TROJAN CosmicDuke Exfiltrating Data via FTP STOR |
rev 2 |
2015-09-18 |
| snort |
ET TROJAN Possible Passthru/Kshell Port Redirection Initiation |
rev 1 |
2015-09-17 |
| snort |
ET TROJAN PlugX UDP CnC Beacon |
rev 1 |
2015-09-17 |
| snort |
ET CURRENT_EVENTS Successful LinkedIn Phish 2015-09-17 |
rev 1 |
2015-09-16 |
| snort |
ET CURRENT_EVENTS Unknown Malicious Second Stage Download URI Struct Sept 15 2015 |
rev 1 |
2015-09-16 |
| snort |
ET WEB_SERVER Cisco IOS HTTP Server Exec Command Execution Attempt |
rev 5 |
2015-09-16 |
| snort |
ET TROJAN PE EXE or DLL Windows file download Text |
rev 1 |
2015-09-15 |
| snort |
ET CURRENT_EVENTS Successful ViewDocsOnline Phish 2015-09-15 |
rev 1 |
2015-09-15 |
| snort |
ET EXPLOIT Possible Android Stagefright MP4 CVE-2015-1538 - ROP |
rev 1 |
2015-09-10 |
| snort |
ET EXPLOIT Possible Android Stagefright MP4 CVE-2015-1538 - Shell |
rev 1 |
2015-09-10 |
| snort |
ET CURRENT_EVENTS Fake Webmail Account Phishing Landing 2015-09-10 |
rev 1 |
2015-09-10 |
| snort |
ET CURRENT_EVENTS Google Drive Phishing Landing Sept 3 |
rev 2 |
2015-09-09 |
| snort |
ET TROJAN Cobalt Strike Beacon Observed |
rev 1 |
2015-09-09 |
| snort |
ET TROJAN Win32/Boaxxe.BR CnC Beacon |
rev 4 |
2015-09-08 |
| snort |
ET CURRENT_EVENTS Successful USAA Phish 2015-09-05 |
rev 1 |
2015-09-05 |
| snort |
ET TROJAN Win32/Reconyc.equo Checkin |
rev 2 |
2015-09-04 |
| snort |
ET CURRENT_EVENTS Successful DHL Account Phish 2015-11-03 |
rev 1 |
2015-09-04 |
| snort |
ET CURRENT_EVENTS Successful Outlook Webmail Account Phish 2015-09-02 |
rev 1 |
2015-09-02 |
| snort |
ET CURRENT_EVENTS Double-Encoded Reverse Base64/Dean Edwards Packed JavaScript Observed in Unknown EK Feb 16 2015 b64 1 M2 |
rev 2 |
2015-09-02 |
| snort |
ET CURRENT_EVENTS Successful EDF Account Phish 2015-09-01 |
rev 1 |
2015-09-01 |
| snort |
ET CURRENT_EVENTS Successful Webmail Account Phish 2015-09-02 |
rev 1 |
2015-09-01 |
| snort |
ET CURRENT_EVENTS Successful Google Drive Phish Sept 1 M2 2015-09-02 |
rev 1 |
2015-09-01 |
| snort |
ET CURRENT_EVENTS Successful Generic Phish - Phone Number 2015-09-02 |
rev 1 |
2015-09-01 |
| snort |
ET CURRENT_EVENTS RIG Landing URI Struct March 20 2015 |
rev 2 |
2015-09-01 |
| snort |
ET CURRENT_EVENTS Successful SFR Account Phish 2015-09-01 |
rev 1 |
2015-09-01 |
| snort |
ET CURRENT_EVENTS PawnStorm Java Class Stage 1 M1 Aug 28 2015 |
rev 1 |
2015-08-28 |
| snort |
ET CURRENT_EVENTS PawnStorm Java Class Stage 2 M1 Aug 28 2015 |
rev 1 |
2015-08-28 |
| snort |
ET CURRENT_EVENTS Magnitude/Hunter EK IE Exploit Aug 23 2015 |
rev 2 |
2015-08-28 |
| snort |
ET CURRENT_EVENTS PawnStorm Sednit DL Aug 28 2015 |
rev 1 |
2015-08-28 |
| snort |
ET CURRENT_EVENTS PawnStorm Java Class Stage 2 M2 Aug 28 2015 |
rev 1 |
2015-08-28 |
| snort |
ET TROJAN AlphaCrypt CnC Beacon 3 |
rev 4 |
2015-08-27 |
| snort |
ET TROJAN EvilGrab/Vidgrab Checkin |
rev 3 |
2015-08-26 |
| snort |
ET GAMES MINECRAFT Server response inbound |
rev 1 |
2015-08-21 |
| snort |
ET TROJAN Ixeshe/Mecklow Checkin 2 |
rev 5 |
2015-08-21 |