| snort |
ET CURRENT_EVENTS Facebook Credential Phish Landing Page M2 2022-08-01 |
rev 1 |
2022-10-03 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page M2 2022-09-28 |
rev 2 |
2022-10-03 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish 2022-08-26 |
rev 1 |
2022-10-03 |
| snort |
ET CURRENT_EVENTS Facebook Credential Phish Landing Page M1 2022-08-01 |
rev 1 |
2022-10-03 |
| snort |
ET CURRENT_EVENTS Facebook Credential Phish Landing Page 2022-08-22 |
rev 1 |
2022-10-03 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish Landing Page 2022-07-26 |
rev 1 |
2022-10-03 |
| snort |
ET CURRENT_EVENTS Microsoft Excel Credential Phish Landing Page 2022-10-03 |
rev 1 |
2022-10-03 |
| snort |
ET CURRENT_EVENTS Successful Facebook Credential Phish 2022-08-01 |
rev 1 |
2022-10-03 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page M2 2022-09-28 |
rev 2 |
2022-10-03 |
| suricata |
ET PHISHING Union Bank Credential Phish Landing Page 2022-08-29 |
rev 1 |
2022-10-03 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page M1 2022-09-28 |
rev 1 |
2022-10-03 |
| suricata |
ET PHISHING Facebook Credential Phish Landing Page M1 2022-08-01 |
rev 1 |
2022-10-03 |
| suricata |
ET PHISHING Successful Generic Credential Phish 2022-08-26 |
rev 1 |
2022-10-03 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page 2022-07-26 |
rev 1 |
2022-10-03 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page 2022-08-23 |
rev 1 |
2022-10-03 |
| suricata |
ET PHISHING Successful Facebook Credential Phish 2022-08-01 |
rev 1 |
2022-10-03 |
| suricata |
ET PHISHING Facebook Credential Phish Landing Page M2 2022-08-01 |
rev 1 |
2022-10-03 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page 2022-10-03 |
rev 1 |
2022-10-03 |
| suricata |
ET PHISHING Microsoft Excel Credential Phish Landing Page 2022-10-03 |
rev 1 |
2022-10-03 |
| suricata |
ET PHISHING Successful Generic Credential Phish Landing Page 2022-07-26 |
rev 1 |
2022-10-03 |
| suricata |
ET PHISHING Facebook Credential Phish Landing Page 2022-08-22 |
rev 1 |
2022-10-03 |
| suricata |
ET PHISHING Successful Generic Credential Phish 2022-08-23 |
rev 1 |
2022-10-03 |
| sigma |
Use of UltraVNC Remote Access Software |
test |
2022-10-02 |
| sigma |
Chopper Webshell Process Pattern |
test |
2022-10-01 |
| sigma |
Suspicious Execution of Shutdown to Log Out |
test |
2022-10-01 |
| sigma |
Suspicious ASPX File Drop by Exchange |
test |
2022-10-01 |
| snort |
ET TROJAN Havoc Framework CnC Request |
rev 1 |
2022-09-30 |
| snort |
ET TROJAN Havoc Framework CnC Response |
rev 1 |
2022-09-30 |
| snort |
ET TROJAN WP CharCode Inject |
rev 1 |
2022-09-30 |
| snort |
ET INFO 404 Response with Javascript Variable in Page |
rev 1 |
2022-09-30 |
| snort |
ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Agent.aam CnC Domain in DNS Lookup |
rev 1 |
2022-09-30 |
| suricata |
ET MALWARE WP CharCode Inject |
rev 1 |
2022-09-30 |
| snort |
ET TROJAN Win32/NetDooka Framework RAT Sending File |
rev 5 |
2022-09-29 |
| snort |
ET TROJAN TA444 Domain in DNS Lookup |
rev 1 |
2022-09-29 |
| snort |
ET TROJAN TA444 Domain in DNS Lookup |
rev 1 |
2022-09-29 |
| snort |
ET TROJAN Win32/NetDooka Framework RAT Sending Session ID |
rev 4 |
2022-09-29 |
| suricata |
ET MALWARE TA444 Domain in DNS Lookup |
rev 1 |
2022-09-29 |
| suricata |
ET MALWARE TA444 Domain in DNS Lookup |
rev 1 |
2022-09-29 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish |
rev 1 |
2022-09-28 |
| snort |
ET TROJAN TigerHunter DOTM CnC Checkin |
rev 1 |
2022-09-28 |