| snort |
ET CURRENT_EVENTS Sweet Orange Landing with Applet Sep 30 2013 |
rev 5 |
2013-09-30 |
| snort |
ET CURRENT_EVENTS - Possible Redkit 1-4 char JNLP request |
rev 6 |
2013-09-27 |
| snort |
ET TROJAN Hiloti/Mufanom CnC Response |
rev 2 |
2013-09-26 |
| snort |
ET TROJAN Worm.VBS.ayr Checkin 2 |
rev 2 |
2013-09-25 |
| snort |
ET TROJAN DATA-BROKER BOT Activity |
rev 2 |
2013-09-25 |
| snort |
ET CURRENT_EVENTS W32/Caphaw DriveBy Campaign Statistic.js |
rev 1 |
2013-09-25 |
| snort |
ET TROJAN Hiloti/Mufanom Downloader Checkin |
rev 8 |
2013-09-25 |
| snort |
ET TROJAN APT.Agtid callback |
rev 1 |
2013-09-24 |
| snort |
ET TROJAN W32/Caphaw Requesting Additional Modules From CnC |
rev 4 |
2013-09-24 |
| snort |
ET TROJAN WindowsEnterpriseSuite FakeAV check-in GET |
rev 6 |
2013-09-20 |
| snort |
ET TROJAN Win32/Nitol.B Checkin |
rev 4 |
2013-09-19 |
| snort |
ET TROJAN W32/Downloader.Mevade.FBV CnC Beacon |
rev 1 |
2013-09-19 |
| snort |
ET TROJAN W32/Zzinfor.A Retrieving Instructions From CnC Server |
rev 1 |
2013-09-19 |
| snort |
ET TROJAN ZeroAccess Outbound udp traffic detected |
rev 8 |
2013-09-19 |
| snort |
ET CURRENT_EVENTS DRIVEBY Styx - TDS - Redirect To Landing Page |
rev 2 |
2013-09-18 |
| snort |
ET CURRENT_EVENTS SNET EK Encoded VBS 1 |
rev 1 |
2013-09-17 |
| snort |
ET CURRENT_EVENTS Unknown EK Fake Microsoft Security Update Applet Sep 16 2013 |
rev 1 |
2013-09-17 |
| snort |
ET CURRENT_EVENTS SNET EK Encoded VBS 3 |
rev 1 |
2013-09-17 |
| snort |
ET CURRENT_EVENTS SNET EK Encoded VBS 2 |
rev 1 |
2013-09-17 |
| snort |
ET TROJAN W32/Hesperus.Banker Tr-mail Variant Sending Data To CnC |
rev 1 |
2013-09-16 |
| snort |
ET MOBILE_MALWARE Android/FakeAhnAV.A CnC Beacon |
rev 1 |
2013-09-16 |
| snort |
ET TROJAN ZeroAccess P2P Module v6 Reporting |
rev 1 |
2013-09-13 |
| snort |
ET TROJAN Waledac FACEPUNCH Traffic Detected |
rev 5 |
2013-09-11 |
| snort |
ET WEB_SERVER PHP SESSION SuperGlobal in POST |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP SESSION SuperGlobal in URI |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP REQUEST SuperGlobal in POST |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP POST SuperGlobal in URI |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP REQUEST SuperGlobal in URI |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP GET SuperGlobal in URI |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP ENV SuperGlobal in POST |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP COOKIE SuperGlobal in URI |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP SERVER SuperGlobal in URI |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP ENV SuperGlobal in URI |
rev 1 |
2013-09-10 |
| snort |
ET WEB_SERVER PHP COOKIE SuperGlobal in POST |
rev 1 |
2013-09-10 |
| snort |
ET TROJAN Bladabindi/njrat CnC Checkin |
rev 2 |
2013-09-05 |
| snort |
ET CURRENT_EVENTS Sakura Landing with Applet Aug 30 2013 |
rev 1 |
2013-09-03 |
| snort |
ET WEB_SERVER WebShell Generic eval of convert_uudecode |
rev 6 |
2013-08-31 |
| snort |
ET WEB_SERVER WebShell Generic eval of gzinflate |
rev 6 |
2013-08-31 |
| snort |
ET WEB_SERVER WebShell Generic eval of str_rot13 |
rev 6 |
2013-08-31 |
| snort |
ET WEB_SERVER WebShell Generic eval of gzuncompress |
rev 6 |
2013-08-31 |