| snort |
ET POLICY Unsupported/Fake Internet Explorer Version MSIE 2. |
rev 2 |
2013-05-24 |
| snort |
ET WEB_SERVER Apache Struts Possible xwork Disable Method Execution |
rev 1 |
2013-05-24 |
| snort |
ET TROJAN Trojan.Win32.Antavmu.guw Checkin |
rev 1 |
2013-05-23 |
| snort |
ET TROJAN W32/Briba CnC POST Beacon |
rev 3 |
2013-05-22 |
| snort |
ET TROJAN Backdoor.Win32.Agent.bjjv Checkin |
rev 1 |
2013-05-21 |
| snort |
ET TROJAN Trojan.Win32.VB.cefz Checkin |
rev 1 |
2013-05-21 |
| snort |
ET TROJAN Trojan-Spy.Win32.KeyLogger.acuj Checkin |
rev 2 |
2013-05-21 |
| snort |
ET TROJAN Hangover Campaign Keylogger Checkin |
rev 1 |
2013-05-21 |
| snort |
ET INFO Possible Firefox Plugin install |
rev 2 |
2013-05-21 |
| snort |
ET TROJAN Lyposit Ransomware Checkin 1 |
rev 5 |
2013-05-20 |
| snort |
ET POLICY Android Dalvik Executable File Download |
rev 1 |
2013-05-16 |
| snort |
ET TROJAN Embedded Android Dalvik Executable File With Fake Windows Executable Header - Possible AV Bypass Attempt |
rev 2 |
2013-05-16 |
| snort |
ET WEB_SERVER ColdFusion scheduletasks access |
rev 1 |
2013-05-14 |
| snort |
ET TROJAN Trojan-Downloader.Win32.AutoIt.mj Checkin |
rev 1 |
2013-05-14 |
| snort |
ET WEB_SERVER ColdFusion scheduleedit access |
rev 1 |
2013-05-14 |
| snort |
ET INFO Possible Chrome Plugin install |
rev 1 |
2013-05-14 |
| snort |
ET WEB_SERVER HTTPing Usage Inbound |
rev 1 |
2013-05-14 |
| snort |
ET TROJAN Possible Linux/Cdorked.A CnC |
rev 1 |
2013-05-14 |
| snort |
ET WEB_SERVER ColdFusion path disclosure to get the absolute path |
rev 3 |
2013-05-09 |
| snort |
ET WEB_SERVER ColdFusion password.properties access |
rev 2 |
2013-05-09 |
| snort |
ET EXPLOIT Exim/Dovecot Possible MAIL FROM Command Execution |
rev 2 |
2013-05-08 |
| snort |
ET EXPLOIT Metasploit js_property_spray sprayHeap |
rev 2 |
2013-05-07 |
| snort |
ET INFO Suspicious Possible CollectGarbage in base64 1 |
rev 2 |
2013-05-07 |
| snort |
ET EXPLOIT Metasploit mstime_malloc no-spray |
rev 2 |
2013-05-07 |
| snort |
ET INFO Suspicious Possible CollectGarbage in base64 3 |
rev 2 |
2013-05-07 |
| snort |
ET INFO Suspicious Possible CollectGarbage in base64 2 |
rev 2 |
2013-05-07 |
| snort |
ET TROJAN DEEP PANDA Checkin 1 |
rev 3 |
2013-05-04 |
| snort |
ET TROJAN Suspicious Fake Opera 10 User-Agent |
rev 3 |
2013-05-04 |
| snort |
ET TROJAN W32/Rovnix Activity |
rev 6 |
2013-05-03 |
| snort |
ET TROJAN Zeus POST Request to CnC sk1 and bn1 post parameters |
rev 4 |
2013-05-02 |
| snort |
ET TROJAN Cookies/Cookiebag Checkin |
rev 1 |
2013-05-02 |
| snort |
ET TROJAN FakeAV FakeSmoke HTTP POST check-in |
rev 8 |
2013-05-02 |
| snort |
GPL SMTP EXPN overflow attempt |
rev 9 |
2013-05-02 |
| snort |
ET INFO myobfuscate.com Encoded Script Calling home |
rev 3 |
2013-05-01 |
| snort |
ET CURRENT_EVENTS Possible Metasploit Java Payload |
rev 2 |
2013-04-29 |
| snort |
ET CURRENT_EVENTS Possible Metasploit Java Exploit |
rev 3 |
2013-04-28 |
| snort |
ET CURRENT_EVENTS Possible Java Applet JNLP applet_ssv_validated Click To Run Bypass |
rev 1 |
2013-04-28 |
| snort |
ET TROJAN Koobface C&C availability check |
rev 7 |
2013-04-25 |
| snort |
ET CURRENT_EVENTS Unknown - Java Request - gt 60char hex-ascii |
rev 6 |
2013-04-24 |
| snort |
ET POLICY Logmein.com Host List Download |
rev 8 |
2013-04-22 |