| snort |
ET CURRENT_EVENTS Generic Phishing Landing Hosted via Weebly |
rev 2 |
2020-10-07 |
| snort |
ET TROJAN Aerial Keylogger DNS Request |
rev 2 |
2020-10-07 |
| snort |
ET CURRENT_EVENTS Docusign Phishing Landing Hosted via Weebly |
rev 2 |
2020-10-07 |
| snort |
ET CURRENT_EVENTS Generic Phishing Landing Hosted via Weebly |
rev 2 |
2020-10-07 |
| snort |
ET CURRENT_EVENTS Generic Phishing Landing Hosted via Weebly |
rev 2 |
2020-10-07 |
| suricata |
ET PHISHING Docusign Phishing Landing Hosted via Weebly |
rev 2 |
2020-10-07 |
| suricata |
ET PHISHING Generic Phishing Landing Hosted via Weebly |
rev 2 |
2020-10-07 |
| suricata |
ET PHISHING Generic Phishing Landing Hosted via Weebly |
rev 2 |
2020-10-07 |
| suricata |
ET MALWARE Aerial Keylogger DNS Request |
rev 2 |
2020-10-07 |
| suricata |
ET MALWARE Maldoc Second Stage VBS Downloader with URL Padding |
rev 4 |
2020-10-07 |
| suricata |
ET PHISHING Generic Phishing Landing Hosted via Weebly |
rev 2 |
2020-10-07 |
| suricata |
ET HUNTING Suspicious Request for Pdf.exe Observed in Zeus/Luminosity Link |
rev 6 |
2020-10-07 |
| snort |
ET INFO Google Adwords Conversion not from Google |
rev 2 |
2020-10-06 |
| snort |
ET TROJAN UsefulTyphon CnC Activity M1 |
rev 2 |
2020-10-06 |
| snort |
ET TROJAN Fullz House Credit Card Skimmer Data Exfil |
rev 2 |
2020-10-06 |
| snort |
ET TROJAN UsefulTyphon CnC Activity M2 |
rev 2 |
2020-10-06 |
| suricata |
ET MALWARE Monsoon Tinytyphon CnC Beacon Exfiltrating Docs |
rev 4 |
2020-10-06 |
| suricata |
ET MALWARE Observed Card Skimmer CnC Domain in TLS SNI |
rev 1 |
2020-10-06 |
| suricata |
ET WEB_SERVER Possible CVE-2016-5118 Exploit MVG attempt M2 |
rev 4 |
2020-10-06 |
| suricata |
ET WEB_SERVER Possible CVE-2016-5118 Exploit MVG attempt M1 |
rev 4 |
2020-10-06 |
| suricata |
ET HUNTING Google Adwords Conversion not from Google |
rev 1 |
2020-10-06 |
| suricata |
ET MALWARE Fullz House Credit Card Skimmer Data Exfil |
rev 1 |
2020-10-06 |
| snort |
ET TROJAN Ragnarok Ransomware CnC Activity M2 |
rev 4 |
2020-10-05 |
| suricata |
ET WEB_SERVER WEBSHELL JSP/Backdoor Shell Access |
rev 5 |
2020-10-05 |
| suricata |
ET PHISHING Suspicious LastPass URI Structure - Possible Phishing |
rev 4 |
2020-10-05 |
| suricata |
ET MALWARE Ragnarok Ransomware CnC Activity M2 |
rev 3 |
2020-10-05 |
| snort |
ET TROJAN XDUpload Uploading Files |
rev 2 |
2020-10-02 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-10-02 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-10-02 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-10-02 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-10-02 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-10-02 |
| snort |
ET EXPLOIT [401TRG] HPDM Backdoor Login |
rev 2 |
2020-10-02 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-10-02 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-10-02 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-10-02 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-10-02 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-10-02 |
| snort |
ET TROJAN XDMonitor Checkin Activity |
rev 2 |
2020-10-02 |
| snort |
ET TROJAN XDUpload Sending File Upload Progress |
rev 2 |
2020-10-02 |