| suricata |
ET MALWARE MirrorBlast Checkin |
rev 1 |
2021-09-10 |
| snort |
ET TROJAN Suspected Stitch Variant Backdoor CnC |
rev 2 |
2021-09-09 |
| snort |
ET NETBIOS PolarisOffice Insecure Library Loading - SMB ASCII |
rev 2 |
2021-09-09 |
| snort |
ET TROJAN Backdoor family PCRat/Gh0st CnC traffic |
rev 11 |
2021-09-09 |
| snort |
ET NETBIOS PolarisOffice Insecure Library Loading - SMB Unicode |
rev 2 |
2021-09-09 |
| snort |
ET TROJAN Win32/PSW.WOW.NLZ CnC Activity |
rev 2 |
2021-09-09 |
| suricata |
ET MALWARE Backdoor family PCRat/Gh0st CnC traffic |
rev 15 |
2021-09-09 |
| suricata |
ET NETBIOS PolarisOffice Insecure Library Loading - SMB Unicode |
rev 2 |
2021-09-09 |
| suricata |
ET MALWARE Possible IceRat CnC Activity |
rev 2 |
2021-09-09 |
| suricata |
ET MALWARE Suspected Stitch Variant Backdoor CnC |
rev 2 |
2021-09-09 |
| suricata |
ET NETBIOS PolarisOffice Insecure Library Loading - SMB ASCII |
rev 2 |
2021-09-09 |
| snort |
ET TROJAN Win32/Beapy/Lemon_Duck CnC Checkin |
rev 4 |
2021-09-08 |
| snort |
ET MALWARE Win32/MobiGame Install Stats Checkin M1 |
rev 2 |
2021-09-08 |
| snort |
ET TROJAN W32/Bingoml!tr CnC Activity |
rev 2 |
2021-09-08 |
| snort |
ET MALWARE Win32/MobiGame Install Stats Checkin M2 |
rev 2 |
2021-09-08 |
| snort |
ET TROJAN Win32/Syndicasec Encoded Response Embedded in XML HTML Title Tags Inbound |
rev 1 |
2021-09-07 |
| snort |
ET TROJAN Win32/Enemyfear Stealer Exfil |
rev 1 |
2021-09-03 |
| snort |
ET MALWARE ThunderUnion Install Checkin |
rev 2 |
2021-09-03 |
| suricata |
ET MALWARE Win32/Enemyfear Stealer Exfil |
rev 1 |
2021-09-03 |
| snort |
ET INFO Observed Suspicious Request nc.exe in URI |
rev 1 |
2021-09-02 |
| snort |
ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response |
rev 2 |
2021-09-02 |
| suricata |
ET MALWARE ELF/MooBot Mirai DDoS Variant Server Response |
rev 2 |
2021-09-02 |
| snort |
ET INFO Suspicious Request to iplogger .org Contains Period |
rev 1 |
2021-09-01 |
| snort |
ET EXPLOIT Possible JNBridge Java Deserialization Attempt M1 |
rev 1 |
2021-08-31 |
| snort |
ET CURRENT_EVENTS LinkedIn Phishing Landing 2018-02-09 M2 |
rev 4 |
2021-08-31 |
| snort |
ET EXPLOIT Possible JNBridge Java Deserialization Attempt M3 |
rev 1 |
2021-08-31 |
| snort |
ET TROJAN Win32/Vodkagats Loader Requesting Payload |
rev 2 |
2021-08-31 |
| snort |
ET EXPLOIT Possible JNBridge Java Deserialization Attempt M2 |
rev 1 |
2021-08-31 |
| suricata |
ET EXPLOIT Possible JNBridge Java Deserialization Attempt M1 |
rev 1 |
2021-08-31 |
| suricata |
ET EXPLOIT Possible JNBridge Java Deserialization Attempt M3 |
rev 1 |
2021-08-31 |
| suricata |
ET EXPLOIT Possible JNBridge Java Deserialization Attempt M2 |
rev 1 |
2021-08-31 |
| suricata |
ET EXPLOIT Microsoft Exchange - InboxRules.svc Access Observed Following Successful ProxyToken Attack |
rev 1 |
2021-08-30 |
| snort |
ET TROJAN Win32/GenCBL.XS CnC Activity |
rev 2 |
2021-08-27 |
| snort |
ET TROJAN MSIL/Document Stealer Exfil |
rev 2 |
2021-08-27 |
| snort |
ET EXPLOIT Prestashop Supercheckout Module Arbitrary File Upload |
rev 2 |
2021-08-27 |
| snort |
ET EXPLOIT Prestashop Orderfiles Module Arbitrary File Upload |
rev 2 |
2021-08-27 |
| suricata |
ET EXPLOIT Prestashop Orderfiles Module Arbitrary File Upload |
rev 1 |
2021-08-27 |
| suricata |
ET EXPLOIT Prestashop Supercheckout Module Arbitrary File Upload |
rev 1 |
2021-08-27 |
| suricata |
ET MALWARE MSIL/Document Stealer Exfil |
rev 2 |
2021-08-27 |
| suricata |
ET MALWARE Win32/GenCBL.XS CnC Activity |
rev 2 |
2021-08-27 |