| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.faizinternational .com .np domain |
rev 1 |
2025-05-10 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.faizinternational .com .np domain |
rev 1 |
2025-05-10 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.faizinternational .com .np domain |
rev 1 |
2025-05-10 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.faizinternational .com .np domain |
rev 1 |
2025-05-10 |
| snort |
ET CURRENT_EVENTS DollyWay v3 PHP TDS Redirect |
rev 1 |
2025-05-09 |
| suricata |
ET EXPLOIT_KIT DollyWay v3 PHP TDS Redirect |
rev 1 |
2025-05-09 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.burgermap .org domain |
rev 1 |
2025-05-07 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.burgermap .org domain |
rev 1 |
2025-05-07 |
| snort |
ET TROJAN VKeylogger CnC Checkin |
rev 1 |
2025-05-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.burgermap .org domain |
rev 1 |
2025-05-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.burgermap .org domain |
rev 1 |
2025-05-07 |
| suricata |
ET MALWARE VKeylogger CnC Checkin |
rev 1 |
2025-05-07 |
| snort |
ET POLICY Possible HTA Application Download |
rev 4 |
2025-05-06 |
| suricata |
ET INFO Possible HTA Application Download |
rev 7 |
2025-05-06 |
| snort |
ET ATTACK_RESPONSE Observed ClickFix Landing Page Inbound |
rev 1 |
2025-05-05 |
| suricata |
ET ATTACK_RESPONSE Observed ClickFix Landing Page Inbound |
rev 1 |
2025-05-05 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.virtualsiam .com domain |
rev 1 |
2025-05-04 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.virtualsiam .com domain |
rev 1 |
2025-05-04 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.virtualsiam .com domain |
rev 1 |
2025-05-04 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.virtualsiam .com domain |
rev 1 |
2025-05-04 |
| snort |
ET TROJAN TerraStealerV2 New Victim Checkin via Telegram API |
rev 1 |
2025-05-02 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.defdc .com domain |
rev 1 |
2025-05-02 |
| snort |
ET TROJAN TerraStealerV2 Data Exfil via WeTransfers |
rev 1 |
2025-05-02 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.defdc .com domain |
rev 1 |
2025-05-02 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.roedernallee .com domain |
rev 1 |
2025-05-02 |
| snort |
ET TROJAN TerraStealerV2 CnC Telegram Bot Response |
rev 1 |
2025-05-02 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.roedernallee .com domain |
rev 1 |
2025-05-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.defdc .com domain |
rev 1 |
2025-05-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.roedernallee .com domain |
rev 1 |
2025-05-02 |
| suricata |
ET MALWARE TerraStealerV2 New Victim Checkin via Telegram API |
rev 1 |
2025-05-02 |
| suricata |
ET MALWARE TerraStealerV2 Data Exfil via WeTransfers |
rev 1 |
2025-05-02 |
| suricata |
ET MALWARE TerraStealerV2 CnC Telegram Bot Response |
rev 1 |
2025-05-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.roedernallee .com domain |
rev 1 |
2025-05-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.defdc .com domain |
rev 1 |
2025-05-02 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.lifepixeled .com domain |
rev 1 |
2025-05-01 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.mappuchan .com domain |
rev 1 |
2025-05-01 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.mappuchan .com domain |
rev 1 |
2025-05-01 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.lifepixeled .com domain |
rev 1 |
2025-05-01 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.mappuchan .com domain |
rev 1 |
2025-05-01 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.lifepixeled .com domain |
rev 1 |
2025-05-01 |