| snort |
ET CURRENT_EVENTS Apple Phishing Panel Accessed on Internal Compromised Server |
rev 2 |
2021-01-06 |
| snort |
ET TROJAN Possible IceRat CnC Activity |
rev 2 |
2021-01-06 |
| suricata |
ET PHISHING Apple Phishing Panel Accessed on Internal Compromised Server |
rev 2 |
2021-01-06 |
| suricata |
ET MALWARE IceRat CnC Acitivty M2 |
rev 2 |
2021-01-06 |
| suricata |
ET PHISHING Apple Phishing Panel Accessed on External Compromised Server |
rev 2 |
2021-01-06 |
| snort |
ET TROJAN Jupyter Stealer Reporting System Information M2 |
rev 2 |
2021-01-05 |
| snort |
ET TROJAN Win32/Ymacco.AA1C Activity |
rev 2 |
2021-01-04 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2021-01-04 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2021-01-04 |
| snort |
ET USER_AGENTS Suspicious User-Agent Simple Bot |
rev 2 |
2020-12-31 |
| snort |
ET TROJAN MSIL/Azula Logger CnC Activity |
rev 2 |
2020-12-31 |
| suricata |
ET USER_AGENTS Suspicious User-Agent Simple Bot |
rev 1 |
2020-12-31 |
| snort |
ET CURRENT_EVENTS Successful Clydesdale Bank Phish 2020-12-30 |
rev 2 |
2020-12-30 |
| snort |
ET TROJAN Observed DarkSide Ransomware CnC Domain in TLS SNI |
rev 2 |
2020-12-29 |
| snort |
ET CURRENT_EVENTS PurpleFox EK Domain in DNS Lookup |
rev 2 |
2020-12-29 |
| snort |
ET TROJAN Possible PurpleFox EK Framework URI Struct Payload Request M1 |
rev 2 |
2020-12-29 |
| snort |
ET TROJAN Possible PurpleFox EK Redirect |
rev 2 |
2020-12-29 |
| suricata |
ET EXPLOIT_KIT Possible PurpleFox EK Redirect |
rev 1 |
2020-12-29 |
| snort |
ET TROJAN Worm.Win32.Balucaf.A Checkin |
rev 4 |
2020-12-23 |
| snort |
ET TROJAN Observed CobaltStrike/TEARDROP CnC Domain Domain in DNS Query |
rev 2 |
2020-12-23 |
| suricata |
ET MALWARE Observed CobaltStrike/TEARDROP CnC Domain Domain in DNS Query |
rev 1 |
2020-12-23 |
| sigma |
CMSTP Execution Process Creation |
stable |
2020-12-23 |
| snort |
ET TROJAN Smanager CnC Domain in DNS Lookup |
rev 2 |
2020-12-22 |
| snort |
ET TROJAN Smanager CnC Domain in DNS Lookup |
rev 2 |
2020-12-22 |
| suricata |
ET HUNTING Suspicious Redirect to Download EXE from Bitbucket |
rev 4 |
2020-12-22 |
| suricata |
ET MALWARE User-Agent in Referer Field - Likely Malware |
rev 10 |
2020-12-22 |
| snort |
ET TROJAN AHK.CREDSTEALER.A CnC Activity |
rev 2 |
2020-12-18 |
| snort |
ET TROJAN Win32.Nitol.K Variant CnC |
rev 3 |
2020-12-18 |
| suricata |
ET MALWARE Win32.Nitol.K Variant CnC |
rev 4 |
2020-12-18 |
| snort |
ET TROJAN Observed SystemBC CnC Domain in DNS Query |
rev 2 |
2020-12-17 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-12-17 |
| snort |
ET TROJAN Observed SystemBC CnC Domain in DNS Query |
rev 2 |
2020-12-17 |
| snort |
ET TROJAN Observed SystemBC CnC Domain in DNS Query |
rev 2 |
2020-12-17 |
| snort |
ET TROJAN Observed SystemBC CnC Domain in DNS Query |
rev 2 |
2020-12-17 |
| snort |
ET TROJAN Observed SystemBC CnC Domain in DNS Query |
rev 2 |
2020-12-17 |
| snort |
ET TROJAN Observed SystemBC CnC Domain in DNS Query |
rev 2 |
2020-12-17 |
| snort |
ET TROJAN Observed SystemBC CnC Domain in DNS Query |
rev 2 |
2020-12-17 |
| snort |
ET TROJAN Observed SystemBC CnC Domain in DNS Query |
rev 2 |
2020-12-17 |
| snort |
ET TROJAN Observed SystemBC CnC Domain in DNS Query |
rev 2 |
2020-12-17 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-12-17 |