| snort |
ET TROJAN Win32/Cutwail.BE Checkin 1 |
rev 3 |
2014-04-28 |
| snort |
ET TROJAN ftpchk3.php upload attempted |
rev 2 |
2014-04-24 |
| snort |
ET CURRENT_EVENTS Fiesta SilverLight Exploit Download |
rev 1 |
2014-04-23 |
| snort |
ET CURRENT_EVENTS Fiesta Flash Exploit Download |
rev 1 |
2014-04-23 |
| snort |
ET POLICY Possible Grams DarkMarket Search DNS Domain Lookup |
rev 3 |
2014-04-22 |
| snort |
ET TROJAN Backdoor Lanfiltrator Checkin |
rev 5 |
2014-04-22 |
| snort |
ET TROJAN General Trojan Downloader |
rev 6 |
2014-04-22 |
| snort |
ET WEB_CLIENT Oracle Java 6 Object Tag launchjnlp docbase Parameters Buffer Overflow |
rev 5 |
2014-04-21 |
| snort |
ET TROJAN Virut Family GET |
rev 6 |
2014-04-21 |
| snort |
ET TROJAN CryptoDefense DNS Domain Lookup |
rev 3 |
2014-04-17 |
| snort |
ET TROJAN PlugX Checkin |
rev 5 |
2014-04-16 |
| snort |
ET TROJAN User-Agent in Referer Field - Likely Malware |
rev 7 |
2014-04-14 |
| snort |
ET TROJAN W32/SpeedingUpMyPC.Rootkit Successful Install GET Type CnC Beacon |
rev 3 |
2014-04-14 |
| snort |
ET TROJAN Suspicious HTTP Referer C Drive Path |
rev 2 |
2014-04-14 |
| snort |
ET TROJAN W32/Trojan-Gypikon Server Check-in Response |
rev 3 |
2014-04-14 |
| snort |
GPL FTP authorized_keys file transferred |
rev 5 |
2014-04-14 |
| snort |
ET MOBILE_MALWARE Android.KorBanker Successful Fake Banking App Install CnC Server Acknowledgement |
rev 2 |
2014-04-14 |
| snort |
ET WEB_SERVER Possible Successful Juniper NetScreen ScreenOS Firmware Version Disclosure Attempt |
rev 4 |
2014-04-14 |
| snort |
ET TROJAN Fake Variation of Mozilla 4.0 - Likely Trojan |
rev 8 |
2014-04-10 |
| snort |
ET SCAN IBM NSA User Agent |
rev 10 |
2014-04-09 |
| snort |
ET WEB_SERVER WEBSHELL K-Shell/ZHC Shell 1.0/Aspx Shell Backdoor NetCat_Listener |
rev 1 |
2014-04-07 |
| snort |
ET WEB_SERVER ATTACKER WebShell - Zehir4.asp - content |
rev 1 |
2014-04-07 |
| snort |
ET WEB_SERVER ATTACKER WebShell - Zehir4.asp |
rev 3 |
2014-04-07 |
| snort |
ET TROJAN Hangover Campaign Keylogger 2 checkin |
rev 2 |
2014-04-02 |
| snort |
ET CURRENT_EVENTS Hikvision DVR attempted Synology Recon Scan |
rev 1 |
2014-04-02 |
| snort |
ET CURRENT_EVENTS SofosFO/GrandSoft landing applet plus class Mar 03 2013 |
rev 3 |
2014-04-02 |
| snort |
ET TROJAN Kazy Checkin |
rev 4 |
2014-04-01 |
| snort |
ET TROJAN Backdoor.Win32.Dorkbot.AR Join IRC channel |
rev 4 |
2014-03-31 |
| snort |
ET TROJAN W32/SpeedingUpMyPC.Rootkit CnC Beacon |
rev 1 |
2014-03-28 |
| snort |
ET TROJAN W32/SpeedingUpMyPC.Rootkit Install CnC Beacon |
rev 1 |
2014-03-28 |
| snort |
ET TROJAN Bozok.RAT checkin |
rev 3 |
2014-03-27 |
| snort |
ET TROJAN Win32/Sisproc |
rev 1 |
2014-03-26 |
| snort |
ET TROJAN Known Sinkhole Response Header |
rev 2 |
2014-03-26 |
| snort |
ET SCAN NMAP SIP Version Detection Script Activity |
rev 1 |
2014-03-25 |
| snort |
ET SCAN NMAP SIP Version Detect OPTIONS Scan |
rev 1 |
2014-03-25 |
| snort |
ET MOBILE_MALWARE SMSSend Fake flappy bird APK |
rev 2 |
2014-03-24 |
| snort |
ET TROJAN W32/Hesperus.Banker Nlog.php Variant Sending Data To CnC |
rev 4 |
2014-03-24 |
| snort |
ET TROJAN Dorkbot Loader Payload Request |
rev 3 |
2014-03-24 |
| snort |
ET WEB_SERVER WEBSHELL CFM Shell Access |
rev 1 |
2014-03-18 |
| snort |
ET CHAT GaduGadu Chat Server Login OK Packet |
rev 4 |
2014-03-17 |