| suricata |
ET EXPLOIT_KIT JDB Exploit Kit Fake Adobe Download |
rev 7 |
2020-09-18 |
| suricata |
ET EXPLOIT_KIT Possible JDB Exploit Kit Class Request |
rev 8 |
2020-09-18 |
| suricata |
ET MALWARE W32/Iyus.H work_troy.php CnC Request |
rev 5 |
2020-09-18 |
| suricata |
ET MALWARE W32/Beebus HTTP POST CnC Beacon |
rev 4 |
2020-09-18 |
| suricata |
ET INFO PDF - Acrobat Enumeration - pdfobject.js |
rev 4 |
2020-09-18 |
| suricata |
ET WEB_SERVER allow_url_include PHP config option in uri |
rev 5 |
2020-09-18 |
| suricata |
ET WEB_SERVER PHP tag in UA |
rev 5 |
2020-09-18 |
| suricata |
ET MALWARE W32/Iyus.H Initial CnC Beacon |
rev 5 |
2020-09-18 |
| suricata |
ET MALWARE Hangover Campaign Keylogger Checkin |
rev 4 |
2020-09-18 |
| suricata |
ET WEB_SERVER safe_mode PHP config option in uri |
rev 5 |
2020-09-18 |
| snort |
ET POLICY Possible HTTP-TUNNEL detected |
rev 2 |
2020-09-17 |
| suricata |
ET EXPLOIT Geutebruck Attempted Remote Command Injection Inbound |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE Chafer CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE APT DNSpionage/Karkoff CnC Domain in DNS Lookup |
rev 4 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .pl.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious csrss.exe in URI |
rev 15 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET INFO Possible EXE Download Request to ngrok |
rev 4 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious lsass.exe in URI |
rev 16 |
2020-09-17 |
| suricata |
ET MALWARE Inter Skimmer CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE ELF/Emptiness CnC Domain in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT DNSpionage/Karkoff CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Glupteba CnC Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET INFO TOR .exit Pseudo TLD DNS Query |
rev 7 |
2020-09-17 |
| suricata |
ET MALWARE APT28 CnC Domain DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE ELF/Emptiness CnC Domain in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Domen SocEng CnC Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE DNS Query for Known Malicious Domain Observed Serving Various Phish Campaigns |
rev 3 |
2020-09-17 |
| suricata |
ET ADWARE_PUP HTTP Connection to go2000.cn - Common Malware Checkin Server |
rev 6 |
2020-09-17 |
| suricata |
ET INFO HTTP Request to Suspicious *.fit Domain |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE Win32/Varenyky Spambot CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET INFO DNS Query to a Suspicious *.orge.pl Domain |
rev 6 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious rundll32.exe in URI |
rev 15 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT28 CnC Domain DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET EXPLOIT_KIT Zuponcic Hostile JavaScript |
rev 4 |
2020-09-17 |
| suricata |
ET DNS Query for .cc TLD |
rev 5 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .ru.tf Domain |
rev 5 |
2020-09-17 |