| snort |
ET TROJAN WEBC2-AUSOV Checkin Response - Embedded CnC APT1 Related |
rev 3 |
2013-02-20 |
| snort |
ET TROJAN WEBC2-ADSPACE Server Response |
rev 1 |
2013-02-20 |
| snort |
ET TROJAN WEBC2-TABLE Checkin 2 - APT1 Related |
rev 1 |
2013-02-20 |
| snort |
ET CURRENT_EVENTS Adobe PDF Zero Day Trojan.666 Payload libarext32.dll Second Stage Download POST |
rev 2 |
2013-02-19 |
| snort |
ET TROJAN Win32.Zbot.ivgw Downloading EXE |
rev 4 |
2013-02-19 |
| snort |
ET CURRENT_EVENTS Adobe PDF Zero Day Trojan.666 Payload libarhlp32.dll Second Stage Download POST |
rev 2 |
2013-02-19 |
| snort |
ET WEB_SERVER PHP tag in UA |
rev 1 |
2013-02-16 |
| snort |
ET TROJAN W32/Vundo.Downloader Reporting User Website Session Information |
rev 1 |
2013-02-16 |
| snort |
ET TROJAN PDF 0day Communication - agent UA Feb 14 2013 |
rev 2 |
2013-02-15 |
| snort |
ET WEB_CLIENT Microsoft OLE Compound File With Flash |
rev 6 |
2013-02-09 |
| snort |
ET TROJAN W32/FloatingCloud.Banker CnC Beacon |
rev 2 |
2013-02-09 |
| snort |
ET CURRENT_EVENTS Unknown_MM EK - Landing Page |
rev 1 |
2013-02-08 |
| snort |
ET WEB_SPECIFIC_APPS SiteGo file parameter Local File Inclusion Attempt |
rev 1 |
2013-02-08 |
| snort |
ET ACTIVEX Possible Ecava IntegraXor save method Remote ActiveX Buffer Overflow |
rev 2 |
2013-02-08 |
| snort |
ET CURRENT_EVENTS Unknown_MM - Payload Download |
rev 1 |
2013-02-08 |
| snort |
ET TROJAN Umbra/MultiBot Plugin access |
rev 1 |
2013-02-08 |
| snort |
ET WEB_SPECIFIC_APPS SiteGo OpenFolder parameter Local File Inclusion Attempt |
rev 1 |
2013-02-08 |
| snort |
ET TROJAN Red October/Win32.Digitalia Checkin cgi-bin/win/cab |
rev 2 |
2013-02-07 |
| snort |
ET TROJAN Red October/Win32.Digitalia Checkin cgi-bin/nt/th |
rev 2 |
2013-02-07 |
| snort |
ET INFO JAVA - ClassID |
rev 1 |
2013-02-07 |
| snort |
ET TROJAN W32/StartPage.eba Dropper Checkin |
rev 2 |
2013-02-07 |
| snort |
ET TROJAN Red October/Win32.Digitalia Checkin cgi-bin/ms/flush |
rev 2 |
2013-02-07 |
| snort |
ET TROJAN Red October/Win32.Digitalia Checkin cgi-bin/ms/check |
rev 2 |
2013-02-07 |
| snort |
ET INFO JAVA - ClassID |
rev 1 |
2013-02-07 |
| snort |
ET CURRENT_EVENTS CritXPack - Landing Page - Received |
rev 1 |
2013-02-07 |
| snort |
ET TROJAN Red October/Win32.Digitalia Checkin cgi-bin/win/wcx |
rev 2 |
2013-02-07 |
| snort |
ET MOBILE_MALWARE Android TrojanFakeLookout.A |
rev 2 |
2013-02-06 |
| snort |
ET TROJAN W32/ServStart.Variant CnC Beacon |
rev 1 |
2013-02-05 |
| snort |
ET TROJAN Red October/Win32.Digitalia Checkin cgi-bin/dllhost/ac |
rev 5 |
2013-02-05 |
| snort |
ET TROJAN Red October/Win32.Digitalia Checkin cgi-bin/nt/sk |
rev 2 |
2013-02-05 |
| snort |
ET CURRENT_EVENTS CritXPack Landing Pattern |
rev 2 |
2013-02-05 |
| snort |
ET CURRENT_EVENTS Styx Exploit Kit Jerk.cgi TDS |
rev 1 |
2013-02-05 |
| snort |
ET TROJAN W32/Beebus HTTP POST CnC Beacon |
rev 1 |
2013-02-05 |
| snort |
ET CURRENT_EVENTS JDB Exploit Kit JAR Download |
rev 4 |
2013-02-04 |
| snort |
ET TROJAN W32/Jabberbot.A Trednet XMPP CnC Beacon |
rev 1 |
2013-02-01 |
| snort |
ET WEB_SPECIFIC_APPS CMSQLITE mediaAdmin.php file Local File Inclusion Attempt |
rev 1 |
2013-02-01 |
| snort |
ET WEB_SPECIFIC_APPS OSClass id parameter data access Attempt 1 |
rev 1 |
2013-02-01 |
| snort |
ET WEB_SPECIFIC_APPS OSClass id parameter data access Attempt 2 |
rev 1 |
2013-02-01 |
| snort |
ET TROJAN ZeuS Post to C&C footer.php |
rev 1 |
2013-02-01 |
| snort |
ET CURRENT_EVENTS JDB Exploit Kit Landing Page |
rev 3 |
2013-01-30 |