| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.thepresenttraveller .com domain |
rev 1 |
2026-02-08 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.thepresenttraveller .com domain |
rev 1 |
2026-02-08 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.infotechnology .com domain |
rev 1 |
2026-02-08 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.infotechnology .com domain |
rev 1 |
2026-02-08 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.thepresenttraveller .com domain |
rev 1 |
2026-02-08 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.thepresenttraveller .com domain |
rev 1 |
2026-02-08 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.null-t .org domain |
rev 1 |
2026-02-07 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.manica .org domain |
rev 1 |
2026-02-07 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.null-t .org domain |
rev 1 |
2026-02-07 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.manica .org domain |
rev 1 |
2026-02-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.manica .org domain |
rev 1 |
2026-02-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.manica .org domain |
rev 1 |
2026-02-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.null-t .org domain |
rev 1 |
2026-02-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.null-t .org domain |
rev 1 |
2026-02-07 |
| snort |
ET TROJAN Marco Stealer Data Exfiltration Attempt |
rev 1 |
2026-02-06 |
| suricata |
ET MALWARE Marco Stealer Data Exfiltration Attempt |
rev 1 |
2026-02-06 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.rinet .ai domain |
rev 1 |
2026-02-05 |
| snort |
ET TROJAN DesckVB RAT BlugPass Checkin |
rev 1 |
2026-02-05 |
| snort |
ET TROJAN DesckVB RAT D ping request/response |
rev 1 |
2026-02-05 |
| snort |
ET CURRENT_EVENTS Successful Generic Crypto Phish Exfil M2 2026-02-05 |
rev 1 |
2026-02-05 |
| snort |
ET CURRENT_EVENTS CoGUI 404 Response 2026-02-04 |
rev 1 |
2026-02-05 |
| snort |
ET CURRENT_EVENTS Successful Generic Crypto Phish Exfil M1 2026-02-05 |
rev 1 |
2026-02-05 |
| snort |
ET TROJAN DesckVB RAT DetectaAV Checkin |
rev 1 |
2026-02-05 |
| snort |
ET TROJAN DesckVB RAT CnC Checkin |
rev 1 |
2026-02-05 |
| snort |
ET TROJAN DesckVB RAT BlugPass Checkin - Webcam Enumeration |
rev 1 |
2026-02-05 |
| snort |
ET CURRENT_EVENTS CoGUI Response Page 2026-02-04 |
rev 1 |
2026-02-05 |
| snort |
ET CURRENT_EVENTS Generic Crypto Phish Landing Page M1 2026-02-05 |
rev 1 |
2026-02-05 |
| snort |
ET TROJAN DesckVB RAT Ping Checkin |
rev 1 |
2026-02-05 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.rinet .ai domain |
rev 1 |
2026-02-05 |
| suricata |
ET PHISHING Successful Generic Crypto Phish Exfil M1 2026-02-05 |
rev 1 |
2026-02-05 |
| suricata |
ET PHISHING CoGUI 404 Response 2026-02-04 |
rev 1 |
2026-02-05 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.rinet .ai domain |
rev 1 |
2026-02-05 |
| suricata |
ET MALWARE DesckVB RAT Ping Checkin |
rev 1 |
2026-02-05 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.rinet .ai domain |
rev 1 |
2026-02-05 |
| suricata |
ET PHISHING Generic Crypto Phish Landing Page M1 2026-02-05 |
rev 1 |
2026-02-05 |
| suricata |
ET MALWARE DesckVB RAT DetectaAV Checkin |
rev 1 |
2026-02-05 |
| suricata |
ET PHISHING Generic Crypto Phish Landing Page M2 2026-02-05 |
rev 1 |
2026-02-05 |
| suricata |
ET MALWARE DesckVB RAT D ping request/response |
rev 1 |
2026-02-05 |
| suricata |
ET PHISHING CoGUI Response Page 2026-02-04 |
rev 1 |
2026-02-05 |
| suricata |
ET MALWARE DesckVB RAT CnC Checkin |
rev 1 |
2026-02-05 |