번호 | 날짜 | ID | 시그니처 (Total Ruleset: 27,111개) |
26,011 | 2018/05/17 | 2025579 | ET CURRENT_EVENTS Successful Generic Phish 2018-05-16 (set); |
26,010 | 2018/05/12 | 2405207 | ET CNC Shadowserver Reported CnC Server Port 64500 Group 1; [1,2] |
26,009 | 2018/05/12 | 2405208 | ET CNC Shadowserver Reported CnC Server Port 65267 Group 1; [1,2] |
26,008 | 2018/05/12 | 2025164 | ET TROJAN W32/Patchwork.Backdoor CnC Check-in M2; |
26,007 | 2018/05/12 | 2025575 | ET TROJAN ELF/Muhstik Attempting to Download Payload; [1] |
26,006 | 2018/05/12 | 2025163 | ET TROJAN W32/Patchwork.Backdoor Communicating with CnC; |
26,005 | 2018/05/12 | 2025576 | ET USER_AGENTS HackingTrio UA (Hello, World); |
26,004 | 2018/05/12 | 2025574 | ET WEB_SPECIFIC_APPS Apache ActiveMQ File Upload RCE (CVE-2016-3088); [1] |
26,003 | 2018/05/11 | 2025572 | ET CURRENT_EVENTS Paypal Phishing Landing 2018-05-09; |
26,002 | 2018/05/11 | 2025571 | ET CURRENT_EVENTS Paypal Phishing Landing 2018-05-09; |
26,001 | 2018/05/11 | 2025573 | ET CURRENT_EVENTS Paypal Phishing Landing 2018-05-09; |
26,000 | 2018/05/11 | 2025568 | ET CURRENT_EVENTS Netflix Phishing Landing 2018-05-09; |
25,999 | 2018/05/11 | 2025570 | ET CURRENT_EVENTS Paypal Phishing Landing 2018-05-09; |
25,998 | 2018/05/11 | 2025569 | ET CURRENT_EVENTS Netflix Phishing Landing 2018-05-09; |
25,997 | 2018/05/09 | 2025563 | ET CURRENT_EVENTS Possible TSB Bank Phishing Landing 2018-05-07; |
25,996 | 2018/05/09 | 2025566 | ET CURRENT_EVENTS Successful Generic Phish 2018-05-08 (set); |
25,995 | 2018/05/09 | 2025565 | ET CURRENT_EVENTS Successful Generic Phish 2018-05-08 (set); |
25,994 | 2018/05/09 | 2025562 | ET CURRENT_EVENTS Successful IRS Phish 2018-05-07; |
25,993 | 2018/05/09 | 2025567 | ET TROJAN Iron Ransomware Domain (y5mogzal2w25p6bn .ml in DNS Lookup); |
25,992 | 2018/05/09 | 2025561 | ET CURRENT_EVENTS IRS Phishing Landing 2018-05-07; |
25,991 | 2018/05/09 | 2025564 | ET CURRENT_EVENTS Possible Successful TSB Bank Phish 2018-05-07; |
25,990 | 2018/05/08 | 2025560 | ET INFO Observed DNS Query to .myq-see .com DDNS Domain; |
25,989 | 2018/05/08 | 2025559 | ET TROJAN BKransomware Domain (3whyfziey2vr41yq in DNS Lookup); |
25,988 | 2018/05/06 | 2405206 | ET CNC Shadowserver Reported CnC Server Port 65267 Group 1; [1,2] |
25,987 | 2018/05/06 | 2405205 | ET CNC Shadowserver Reported CnC Server Port 64500 Group 1; [1,2] |
25,986 | 2018/05/05 | 2025558 | ET CURRENT_EVENTS [PTsecurity] Possible Malicious (HTA-VBS-PowerShell) obfuscated command; |
25,985 | 2018/05/05 | 2025557 | ET TROJAN RedLeaves HOGFISH APT Implant CnC; [1] |
25,984 | 2018/05/03 | 2025555 | ET CURRENT_EVENTS Netflix Phishing Landing 2018-05-02; |
25,983 | 2018/05/03 | 2025556 | ET CURRENT_EVENTS Paypal Phishing Landing 2018-05-02; |
25,982 | 2018/05/03 | 2025554 | ET CURRENT_EVENTS Possible Successful Generic Phish (set) 2018-05-02; |
25,981 | 2018/05/03 | 2025553 | ET INFO Possible Rogue LoJack Asset Tracking Agent; [1] |
25,980 | 2018/05/02 | 2025551 | ET CURRENT_EVENTS Docusign Phishing Landing 2018-05-01; |
25,979 | 2018/05/02 | 2025546 | ET TROJAN Observed GandCrab Ransomware Domain (carder .bit in DNS Lookup); |
25,978 | 2018/05/02 | 2025550 | ET CURRENT_EVENTS OneDrive Phishing Landing 2018-05-01; |
25,977 | 2018/05/02 | 2025547 | ET TROJAN Likely GandCrab Ransomware Domain in HTTP Host M1; |
25,976 | 2018/05/02 | 2025549 | ET CURRENT_EVENTS Bank of America Phishing Landing 2018-05-01; |
25,975 | 2018/05/02 | 2025548 | ET TROJAN Likely GandCrab Ransomware Domain in HTTP Host M2; |
25,974 | 2018/05/02 | 2025552 | ET TROJAN Java/QRat Variant Checkin; |
25,973 | 2018/04/29 | 2025545 | ET WEB_SPECIFIC_APPS DNN DNNPersonalization Cookie RCE Attempt (CVE-2017-9822); [1] |
25,972 | 2018/04/27 | 2025544 | ET TROJAN MSIL/GravityRAT CnC Domain (mylogisoft .com in DNS Lookup); [1] |
25,971 | 2018/04/27 | 2025540 | ET TROJAN MSIL/G2 Stealer/GravityRAT CnC Checkin; [1] |
25,970 | 2018/04/27 | 2025542 | ET TROJAN MSIL/GravityRAT CnC Domain (msoftupdates .com in DNS Lookup); [1] |
25,969 | 2018/04/27 | 2025536 | ET CURRENT_EVENTS Observed Malicious SSL Cert (Coin-Hive In Browser Mining); |
25,968 | 2018/04/27 | 2025538 | ET TROJAN MSIL/G1 Stealer/GravityRAT Uploading File; [1] |
25,967 | 2018/04/27 | 2025543 | ET TROJAN MSIL/GravityRAT CnC Domain (msoftupdates .eu in DNS Lookup); [1] |
25,966 | 2018/04/27 | 2025534 | ET WEB_SPECIFIC_APPS Drupalgeddon2 <8.3.9 <8.4.6 <8.5.1 RCE Through Registration Form (CVE-2018-7600); [1] |
25,965 | 2018/04/27 | 2025533 | ET WEB_SPECIFIC_APPS Drupal RCE (CVE-2018-7602); [1] |
25,964 | 2018/04/27 | 2025535 | ET CURRENT_EVENTS Observed Coin-Hive In Browser Mining Domain (coin-hive .com in TLS SNI); |
25,963 | 2018/04/27 | 2025537 | ET MALWARE Lavasoft PUA/Adware Client Install; |
25,962 | 2018/04/27 | 2025539 | ET TROJAN MSIL/G1 Stealer/GravityRAT Requesting Payload; [1] |
< 21 22 23 24 25 26 27 28 29 30 > |