| snort |
ET SCAN SipCLI VOIP Scan |
rev 2 |
2013-07-18 |
| snort |
ET MOBILE_MALWARE signed-unsigned integer mismatch code-verification bypass |
rev 1 |
2013-07-17 |
| snort |
ET POLICY Android.Plankton/Tonclank Successful Installation Device Information POST Message Body |
rev 3 |
2013-07-17 |
| snort |
ET SCAN SipCLI VOIP Scan - TCP |
rev 1 |
2013-07-17 |
| snort |
ET ATTACK_RESPONSE Non-Local Burp Proxy Error |
rev 1 |
2013-07-16 |
| snort |
ET CHAT IRC USER Likely bot with 0 0 colon checkin |
rev 1 |
2013-07-13 |
| snort |
ET TROJAN Cryptmen FakAV page Title |
rev 1 |
2013-07-13 |
| snort |
ET CHAT IRC USER Off-port Likely bot with 0 0 colon checkin |
rev 1 |
2013-07-13 |
| snort |
ET CURRENT_EVENTS DRIVEBY Redirection - Wordpress Injection |
rev 1 |
2013-07-09 |
| snort |
ET CURRENT_EVENTS Cool Exploit Kit Plugin-Detect July 08 2013 |
rev 1 |
2013-07-09 |
| snort |
ET TROJAN VBulletin Backdoor CMD inbound |
rev 3 |
2013-07-05 |
| snort |
ET TROJAN VBulletin Backdoor C2 URI Structure |
rev 3 |
2013-07-05 |
| snort |
ET EXPLOIT IPMI Cipher 0 Authentication mode set |
rev 3 |
2013-07-04 |
| snort |
ET CURRENT_EVENTS Lucky7 EK Landing Encoded Plugin-Detect |
rev 1 |
2013-07-04 |
| snort |
ET CURRENT_EVENTS Unknown Malvertising Exploit Kit Hostile Jar app.jar |
rev 3 |
2013-07-04 |
| snort |
ET WEB_SERVER WebShell - GODSPy - Auth Creds |
rev 1 |
2013-07-02 |
| snort |
ET WEB_SERVER WebShell - GODSpy - Cookie |
rev 1 |
2013-07-02 |
| snort |
ET WEB_SERVER WebShell - GODSpy - GOD Hacker |
rev 1 |
2013-07-02 |
| snort |
ET WEB_SERVER WebShell - Pouya - Pouya_Server Shell |
rev 1 |
2013-07-02 |
| snort |
ET WEB_SERVER WebShell - GODSpy - GODSpy title |
rev 2 |
2013-07-02 |
| snort |
ET WEB_SERVER WebShell - GODSpy - Auth Prompt |
rev 2 |
2013-07-02 |
| snort |
ET WEB_SERVER WebShell - GODSpy - MySQL |
rev 1 |
2013-07-02 |
| snort |
ET WEB_SERVER WebShell - Pouya - URI - raiz |
rev 1 |
2013-07-02 |
| snort |
ET CURRENT_EVENTS Redirect to DotkaChef EK Landing |
rev 2 |
2013-06-29 |
| snort |
ET WEB_SPECIFIC_APPS MoinMoin twikidraw Action Traversal File Upload |
rev 1 |
2013-06-28 |
| snort |
ET CURRENT_EVENTS Neutrino Exploit Kit Redirector To Landing Page |
rev 1 |
2013-06-27 |
| snort |
ET TROJAN W32/118GotYourNo Reporting to CnC |
rev 3 |
2013-06-27 |
| snort |
ET TROJAN AntiVirus exe Download Likely FakeAV Install |
rev 4 |
2013-06-27 |
| snort |
ET TROJAN General Win32 Backdoor Checkin POST |
rev 5 |
2013-06-27 |
| snort |
ET TROJAN FakeAV oms.php Data Post |
rev 4 |
2013-06-27 |
| snort |
ET MOBILE_MALWARE Android.Zitmo Forwarding SMS Message to CnC Server |
rev 3 |
2013-06-27 |
| snort |
ET TROJAN Win32/Sisproc Variant POST to CnC Server |
rev 3 |
2013-06-27 |
| snort |
ET CURRENT_EVENTS Possible Java Applet JNLP applet_ssv_validated in Base64 |
rev 4 |
2013-06-25 |
| snort |
ET TROJAN Win32/Comisproc Checkin |
rev 9 |
2013-06-25 |
| snort |
ET EXPLOIT SolusVM 1.13.03 Access to solusvmc-node setuid bin |
rev 3 |
2013-06-25 |
| snort |
ET TROJAN Drive Receiving UDP DDoS instructions |
rev 2 |
2013-06-22 |
| snort |
ET TROJAN Drive Receiving IP2 DDoS instructions |
rev 3 |
2013-06-22 |
| snort |
ET TROJAN Drive Receiving POST2 DDoS instructions |
rev 2 |
2013-06-22 |
| snort |
ET TROJAN Drive Receiving GET DDoS instructions |
rev 2 |
2013-06-22 |
| snort |
ET WEB_SERVER WebShell Generic - ELF File Uploaded |
rev 1 |
2013-06-22 |