| snort |
ET CURRENT_EVENTS Successful Facebook Credential Phish 2022-07-05 |
rev 1 |
2022-07-05 |
| snort |
ET CURRENT_EVENTS Successful PlayerUnknown's Battlegrounds Credential Phish 2022-07-05 |
rev 1 |
2022-07-05 |
| snort |
ET CURRENT_EVENTS Caixa Credential Phish Landing Page 2022-07-05 |
rev 1 |
2022-07-05 |
| snort |
ET CURRENT_EVENTS PlayerUnknown's Battlegrounds Credential Phish Landing Page M1 2022-07-05 |
rev 1 |
2022-07-05 |
| snort |
ET CURRENT_EVENTS Successful Caixa Credential Phish 2022-07-05 |
rev 1 |
2022-07-05 |
| suricata |
ET PHISHING Caixa Credential Phish Landing Page 2022-07-05 |
rev 1 |
2022-07-05 |
| suricata |
ET PHISHING Spox Phish Kit Landing Page 2022-07-05 |
rev 1 |
2022-07-05 |
| suricata |
ET PHISHING Radobank Phishing Landing Page 2022-07-05 |
rev 1 |
2022-07-05 |
| suricata |
ET PHISHING PlayerUnknown's Battlegrounds Credential Phish Landing Page M1 2022-07-05 |
rev 1 |
2022-07-05 |
| suricata |
ET PHISHING Successful Caixa Credential Phish 2022-07-05 |
rev 1 |
2022-07-05 |
| suricata |
ET PHISHING Navy Federal Credit Union Credential Phish Landing Page 2022-07-05 |
rev 1 |
2022-07-05 |
| suricata |
ET PHISHING Successful PlayerUnknown's Battlegrounds Credential Phish 2022-07-05 |
rev 1 |
2022-07-05 |
| sigma |
Triple Cross eBPF Rootkit Install Commands |
test |
2022-07-05 |
| sigma |
Triple Cross eBPF Rootkit Execve Hijack |
test |
2022-07-05 |
| sigma |
Suspicious Network Connection Binary No CommandLine |
test |
2022-07-03 |
| sigma |
UAC Bypass Using IDiagnostic Profile - File |
test |
2022-07-03 |
| snort |
ET CURRENT_EVENTS BT Group Credential Phish Landing Page 2022-07-01 |
rev 1 |
2022-07-01 |
| snort |
ET TROJAN Win32/Remcos RAT Checkin 809 |
rev 1 |
2022-07-01 |
| snort |
ET TROJAN Generic CMD Remote Shell |
rev 1 |
2022-07-01 |
| snort |
ET TROJAN Golang/Kaos/YamaBot CnC Activity |
rev 3 |
2022-07-01 |
| snort |
ET TROJAN Win32/Remcos RAT Checkin 810 |
rev 1 |
2022-07-01 |
| suricata |
ET MALWARE Win32/Remcos RAT Checkin 810 |
rev 1 |
2022-07-01 |
| suricata |
ET MALWARE Golang/Kaos/YamaBot CnC Activity |
rev 3 |
2022-07-01 |
| suricata |
ET MALWARE Win32/Remcos RAT Checkin 809 |
rev 1 |
2022-07-01 |
| suricata |
ET PHISHING BT Group Credential Phish Landing Page 2022-07-01 |
rev 1 |
2022-07-01 |
| suricata |
ET MALWARE Generic CMD Remote Shell |
rev 1 |
2022-07-01 |
| sigma |
Use of Scriptrunner.exe |
test |
2022-07-01 |
| snort |
ET CURRENT_EVENTS Sucessful Global Sources Credential Phish 2022-06-29 |
rev 1 |
2022-06-30 |
| snort |
ET TROJAN MSIL/PSW.Agent.SUD Zipped Data Exfil |
rev 1 |
2022-06-30 |
| snort |
ET CURRENT_EVENTS Sucessful Alibaba Credential Phish 2022-06-29 |
rev 1 |
2022-06-30 |
| snort |
ET TROJAN Possible KONNI CnC Activity |
rev 3 |
2022-06-30 |
| suricata |
ET PHISHING Sucessful Alibaba Credential Phish 2022-06-29 |
rev 1 |
2022-06-30 |
| sigma |
User State Changed From Guest To Member |
test |
2022-06-30 |
| snort |
ET TROJAN xCaon Embedded Encrypted Command in Webpage |
rev 2 |
2022-06-29 |
| snort |
ET INFO Microsoft Office User-Agent Requesting An Excel File |
rev 1 |
2022-06-29 |
| snort |
ET CURRENT_EVENTS Successful Caixa Credential Phish 2022-06-29 |
rev 1 |
2022-06-29 |
| snort |
ET TROJAN Win32/a310Logger Variant Data Exfil via SMTP |
rev 1 |
2022-06-29 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page 2022-06-29 |
rev 1 |
2022-06-29 |
| snort |
ET CURRENT_EVENTS Successful Onedrive Credential Phish 2022-06-22 |
rev 1 |
2022-06-29 |
| snort |
ET INFO Microsoft Office User-Agent Requesting A Doc File |
rev 1 |
2022-06-29 |