| suricata |
ET MALWARE DonotGroup CnC Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .sg.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious rundll32.exe in URI |
rev 15 |
2020-09-17 |
| suricata |
ET PHISHING Possible Successful Phish - Password Submitted to *.000webhostapp.com |
rev 3 |
2020-09-17 |
| suricata |
ET EXPLOIT_KIT NeoSploit - Version Enumerated - Java |
rev 4 |
2020-09-17 |
| suricata |
ET WEB_SPECIFIC_APPS Piwik Backdoor Access |
rev 5 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious winlogin.exe in URI |
rev 16 |
2020-09-17 |
| suricata |
ET INFO Quad9 DNS Over TLS Certificate Inbound |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE DNS Query for Known Malicious Domain Observed Serving Various Phish Campaigns |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Chafer CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE SmokeBot grab data plaintext |
rev 6 |
2020-09-17 |
| suricata |
ET MALWARE Magecart CnC Domain Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE DNS Query for Known Malicious Domain Observed Serving Various Phish Campaigns |
rev 4 |
2020-09-17 |
| suricata |
ET MOBILE_MALWARE NSO Related Domain 21 |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE APT DarkHydrus DNS Lookup 13 |
rev 3 |
2020-09-16 |
| suricata |
ET MOBILE_MALWARE NSO Related Domain 24 |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE BrushaLoader CnC DNS Lookup |
rev 3 |
2020-09-16 |
| suricata |
ET PHISHING Successful Generic Phish to zap-webspace.com Webhost 2018-10-25 |
rev 3 |
2020-09-16 |
| suricata |
ET MALWARE Malicious XLS DDE rar Drop Fake 404 Response |
rev 4 |
2020-09-16 |
| suricata |
ET INFO DNS Query for Suspicious .gq Domain |
rev 4 |
2020-09-16 |
| suricata |
ET MOBILE_MALWARE NSO Related Domain 10 |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE Observed DNS Query to known Windshift APT Related Domain 2 |
rev 3 |
2020-09-16 |
| suricata |
ET MALWARE BrushaLoader CnC DNS Lookup |
rev 3 |
2020-09-16 |
| suricata |
ET MALWARE APT DarkHydrus DNS Lookup 12 |
rev 3 |
2020-09-16 |
| suricata |
ET MOBILE_MALWARE NSO Related Domain 11 |
rev 4 |
2020-09-16 |
| suricata |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 15 |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE APT DarkHydrus DNS Lookup 8 |
rev 3 |
2020-09-16 |
| suricata |
ET MOBILE_MALWARE NSO Related Domain 34 |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE PS/PowerRatankba CnC DNS Lookup |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE JS.InfectedMikrotik Injects Domain Observed in DNS Lookup |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE BrushaLoader CnC DNS Lookup |
rev 3 |
2020-09-16 |
| suricata |
ET MALWARE Chafer CnC DNS Query |
rev 3 |
2020-09-16 |
| suricata |
ET MOBILE_MALWARE NSO Related Domain 12 |
rev 4 |
2020-09-16 |
| suricata |
ET MOBILE_MALWARE NSO Related Domain 13 |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE JS.InfectedMikrotik Injects Domain Observed in DNS Lookup |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE W32.Razy Inject Domain in DNS Lookup |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE STOLENPENCIL CnC Domain in DNS Lookup |
rev 4 |
2020-09-16 |
| suricata |
ET MOBILE_MALWARE NSO Related Domain 29 |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE BrushaLoader CnC DNS Lookup |
rev 3 |
2020-09-16 |
| suricata |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 7 |
rev 4 |
2020-09-16 |