| snort |
ET TROJAN W32/Snojan.BNQKZQH User-Agent |
rev 3 |
2022-04-18 |
| snort |
ET TROJAN MSIL/Crimson Rat CnC Server Response |
rev 2 |
2022-04-18 |
| snort |
ET WEB_SPECIFIC_APPS Hunkaray Duyuru Scripti SQL Injection Attempt -- oku.asp id SELECT |
rev 7 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Paypal Phishing Landing Jun 28 2017 |
rev 3 |
2022-04-18 |
| snort |
ET TROJAN Avzhan DDoS Bot User-Agent MyIE |
rev 9 |
2022-04-18 |
| snort |
ET INFO Doc Template Downloaded from DDNS Site |
rev 2 |
2022-04-18 |
| snort |
ET TROJAN Lyceum Golang HTTP Backdoor Requesting Commands |
rev 2 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Successful Monzo Credential Phish M2 2022-02-17 |
rev 2 |
2022-04-18 |
| snort |
ET TROJAN Bitter RAT HTTP CnC Beacon M2 |
rev 3 |
2022-04-18 |
| snort |
ET TROJAN HVNC USR Init Detected |
rev 2 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish 2022-03-18 |
rev 2 |
2022-04-18 |
| snort |
ET EXPLOIT Oracle WebLogic - wls-wsat Component Deserialization Remote Code Execution Windows |
rev 3 |
2022-04-18 |
| snort |
ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- content.php where UPDATE |
rev 7 |
2022-04-18 |
| snort |
ET TROJAN Tortoiseshell/HMH Download Request |
rev 3 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Observed OWA Phishing Landing Page 2021-08-20 |
rev 2 |
2022-04-18 |
| snort |
ET TROJAN Lyceum Golang HTTP Backdoor Submitting Data to CnC |
rev 2 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Successful CSIS Credential Phish |
rev 2 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Activity POST |
rev 2 |
2022-04-18 |
| snort |
ET WEB_SPECIFIC_APPS Aj Square RSS Reader url SQL Injection |
rev 5 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Monzo Credential Phish Landing Page 2022-02-17 |
rev 2 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Successful Google Drive Phish 2016-11-18 |
rev 2 |
2022-04-18 |
| snort |
ET TROJAN MSIL/Crimson Rat CnC Exfil |
rev 2 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Successful Adobe Phish 2022-01-12 |
rev 2 |
2022-04-18 |
| snort |
ET WEB_SPECIFIC_APPS ActiveNews Manager SQL Injection Attempt -- activenews_view.asp articleID UPDATE |
rev 7 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Metawallet Phish Landing Page 2022-01-13 |
rev 2 |
2022-04-18 |
| snort |
ET MOBILE_MALWARE Kimsuky AppleSeed CnC Checkin M2 |
rev 2 |
2022-04-18 |
| snort |
GPL NETBIOS DCERPC CoGetInstanceFromFile little endian overflow attempt |
rev 7 |
2022-04-18 |
| snort |
ET SCAN struts-pwn User-Agent |
rev 2 |
2022-04-18 |
| snort |
ET WEB_SPECIFIC_APPS Apache Struts ognl inbound OGNL injection remote code execution attempt |
rev 3 |
2022-04-18 |
| snort |
ET MALWARE Win32/MobiGame Install Stats Checkin M3 |
rev 3 |
2022-04-18 |
| snort |
ET WEB_SPECIFIC_APPS DMXReady Secure Login Manager SQL Injection Attempt -- send_password_preferences.asp UNION SELECT |
rev 7 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Successful Citibank Phish 2021-11-10 |
rev 3 |
2022-04-18 |
| snort |
ET TROJAN Lyceum Golang HTTP Backdoor CnC Checkin |
rev 2 |
2022-04-18 |
| snort |
ET TROJAN MSIL/CoinMiner Performing System Checkin |
rev 3 |
2022-04-18 |
| snort |
ET CURRENT_EVENTS Successful Monzo Credential Phish M1 2022-02-17 |
rev 2 |
2022-04-18 |
| suricata |
ET PHISHING IRS Credential Phish Credit Card Payment Data Exfil |
rev 3 |
2022-04-18 |
| suricata |
ET PHISHING Successful Metawallet Phish 2022-01-13 |
rev 3 |
2022-04-18 |
| suricata |
ET PHISHING Successful Generic Credential Phish 2022-03-02 |
rev 3 |
2022-04-18 |
| suricata |
ET PHISHING Paypal Phishing Landing Jun 28 2017 |
rev 5 |
2022-04-18 |
| suricata |
ET MALWARE MSIL/Crimson Rat CnC Exfil |
rev 2 |
2022-04-18 |