| 번호 | 날짜 | ID | 시그니처 (Total Ruleset: 27,111개) |
| 25,911 | 2018/04/13 | 2025486 | ET TROJAN Iron/Maktub Locker Ransomware CnC Checkin; [1] |
| 25,910 | 2018/04/12 | 2025484 | ET TROJAN Pontoeb CnC; [1] |
| 25,909 | 2018/04/12 | 2025485 | ET TROJAN Observed Malicious SSL Cert (CoreBot C2); |
| 25,908 | 2018/04/11 | 2025483 | ET TROJAN Loki Bot Fake 404 Response; |
| 25,907 | 2018/04/11 | 2025476 | ET CURRENT_EVENTS Docusign Phishing Landing 2018-04-09; |
| 25,906 | 2018/04/11 | 2025482 | ET CURRENT_EVENTS Post.ch Cloned Phishing Landing 2018-04-09; |
| 25,905 | 2018/04/11 | 2025481 | ET CURRENT_EVENTS Apple Phishing Landing 2018-04-09; |
| 25,904 | 2018/04/11 | 2025478 | ET CURRENT_EVENTS Paypal Phishing Landing 2018-04-09; |
| 25,903 | 2018/04/11 | 2025479 | ET CURRENT_EVENTS Facebook Phishing Landing 2018-04-09; |
| 25,902 | 2018/04/11 | 2025477 | ET CURRENT_EVENTS s0m3 Phishing Landing 2018-04-09; |
| 25,901 | 2018/04/11 | 2025473 | ET CURRENT_EVENTS Wells Fargo Phishing Landing 2018-04-09; |
| 25,900 | 2018/04/11 | 2025474 | ET CURRENT_EVENTS DHL Phishing Landing 2018-04-09; |
| 25,899 | 2018/04/11 | 2025480 | ET CURRENT_EVENTS OneDrive Phishing Landing 2018-04-09; |
| 25,898 | 2018/04/11 | 2025475 | ET CURRENT_EVENTS Chase Phishing Landing 2018-04-09; |
| 25,897 | 2018/04/07 | 2025471 | ET TROJAN Win32/DanijBot CnC Task Status; |
| 25,896 | 2018/04/07 | 2025472 | ET EXPLOIT Possible CVE-2018-0171 Exploit (PoC based); [1] |
| 25,895 | 2018/04/07 | 2025470 | ET TROJAN Win32/DanijBot CnC Checkin; |
| 25,894 | 2018/04/07 | 2025469 | ET TROJAN Win32/DanijBot User-Agent; |
| 25,893 | 2018/04/06 | 2025468 | ET TROJAN OSX/OceanLotus.D CnC DNS Lookup (widget .shoreoa .com); [1] |
| 25,892 | 2018/04/06 | 2025464 | ET TROJAN OSX/OceanLotus.D Sending Data to CnC; [1] |
| 25,891 | 2018/04/06 | 2025466 | ET TROJAN OSX/OceanLotus.D CnC DNS Lookup (ssl .arkouthrie .com); [1] |
| 25,890 | 2018/04/06 | 2025467 | ET TROJAN OSX/OceanLotus.D CnC DNS Lookup (s3 .hiahornber .com); [1] |
| 25,889 | 2018/04/06 | 2025465 | ET TROJAN OSX/OceanLotus.D Requesting Commands from CnC; [1] |
| 25,888 | 2018/04/06 | 2025463 | ET TROJAN Win32/InnaputRAT CnC DNS Lookup (ajdhsfhiudsfhsi .top); [1] |
| 25,887 | 2018/04/06 | 2025462 | ET TROJAN Win32/InnaputRAT CnC DNS Lookup (ninjagames .top); [1] |
| 25,886 | 2018/04/04 | 2025458 | ET TROJAN [PTsecurity] Win32/SocStealer.Socelars C2 Response; |
| 25,885 | 2018/04/04 | 2025461 | ET SCAN NYU Internet Census UA Inbound; [1] |
| 25,884 | 2018/04/04 | 2025460 | ET INFO NYU Internet HTTP/SSL Census Scan; [1] |
| 25,883 | 2018/04/04 | 2025457 | ET TROJAN [PTsecurity] W32/Rodecap.StealRat C2 Payload (GIF); |
| 25,882 | 2018/04/04 | 2025459 | ET WEB_SPECIFIC_APPS Possible CVE-2013-2618 Attempt (PHP Weathermap Persistent XSS); [1] |
| 25,881 | 2018/04/04 | 2025456 | ET USER_AGENTS Suspicious User-Agent (=Mozilla); |
| 25,880 | 2018/04/04 | 2025455 | ET TROJAN Win32/GandCrab Ransomware CnC Activity M2; |
| 25,879 | 2018/04/03 | 2405201 | ET CNC Shadowserver Reported CnC Server Port 65267 Group 1; [1,2] |
| 25,878 | 2018/04/03 | 2405200 | ET CNC Shadowserver Reported CnC Server Port 64500 Group 1; [1,2] |
| 25,877 | 2018/04/03 | 2025452 | ET TROJAN Observed GandCrab Ransomware Domain (ransomware .bit in DNS Lookup); |
| 25,876 | 2018/04/03 | 2025454 | ET TROJAN Observed GandCrab Ransomware Domain (chlenaverasiskihe .sex in DNS Lookup); |
| 25,875 | 2018/04/03 | 2025453 | ET TROJAN Observed GandCrab Ransomware Domain (zonealarm .bit in DNS Lookup); |
| 25,874 | 2018/03/31 | 2025449 | ET POLICY DNS Query to .onion proxy Domain (onion. pw); [1] |
| 25,873 | 2018/03/31 | 2025451 | ET POLICY Monero Mining Pool Lookup; |
| 25,872 | 2018/03/31 | 2025450 | ET CURRENT_EVENTS Comcast/Xfinity Phishing Landing 2018-03-30; |
| 25,871 | 2018/03/30 | 2025446 | ET POLICY DNS Query to .onion proxy Domain (onion.sx); [1] |
| 25,870 | 2018/03/30 | 2025448 | ET CURRENT_EVENTS Impots Phishing Landing 2018-03-28; |
| 25,869 | 2018/03/30 | 2025444 | ET TROJAN [PTsecurity] Ursnif Socks Proxy Check-in; |
| 25,868 | 2018/03/30 | 2025447 | ET CURRENT_EVENTS Chase Phishing Landing 2018-03-28; |
| 25,867 | 2018/03/30 | 2025445 | ET TROJAN [PTsecurity] Ursnif Socks5 Proxy Connection; |
| 25,866 | 2018/03/30 | 2025443 | ET CURRENT_EVENTS IRS Phishing Landing 2018-03-28; |
| 25,865 | 2018/03/28 | 2025442 | ET CURRENT_EVENTS Adobe PDF Reader Phishing Landing 2018-03-27; |
| 25,864 | 2018/03/28 | 2025441 | ET TROJAN Sharik/Smoke CnC Beacon 10; |
| 25,863 | 2018/03/28 | 2025440 | ET TROJAN Possible Sharik/Smoke Loader Microsoft Connectivity check M3; |
| 25,862 | 2018/03/28 | 2025439 | ET TROJAN Possible Sharik/Smoke Loader Microsoft Connectivity check M2; |
| < 21 22 23 24 25 26 27 28 29 30 > |