| 번호 | 날짜 | ID | 시그니처 (Total Ruleset: 27,111개) |
| 25,411 | 2017/11/08 | 2024969 | ET TROJAN OceanLotus System Profiling JavaScript HTTP Request; [1] |
| 25,410 | 2017/11/08 | 2024970 | ET CURRENT_EVENTS Possible Paypal Phishing Landing - Title over non SSL; |
| 25,409 | 2017/11/07 | 2024968 | ET TROJAN Volex ? OceanLotus System Profiling JavaScript (linkStorage.x00SOCKET); [1] |
| 25,408 | 2017/11/07 | 2024955 | ET TROJAN [PTsecurity] Win32/Randrew!rfn CnC Activity; [1] |
| 25,407 | 2017/11/07 | 2024954 | ET TROJAN SAD Ransomware CnC Activity; |
| 25,406 | 2017/11/07 | 2024965 | ET TROJAN RouteX CnC Domain (3ec9b600789b3bacf2c72ebae142a9c3 .net in DNS Lookup); [1] |
| 25,405 | 2017/11/07 | 2024966 | ET TROJAN Volex ? OceanLotus JavaScript Load (connect.js); [1] |
| 25,404 | 2017/11/07 | 2024967 | ET TROJAN Volex ? OceanLotus JavaScript Fake Page URL Builder Response; [1] |
| 25,403 | 2017/11/07 | 2024956 | ET TROJAN RouteX CnC Domain (cba4a6e5d3c956548a337c52388473f1 .com in DNS Lookup); [1] |
| 25,402 | 2017/11/07 | 2024961 | ET TROJAN RouteX CnC Domain (18bca7c5fd709ac468ba148c590ef6bf .net in DNS Lookup); [1] |
| 25,401 | 2017/11/07 | 2024959 | ET TROJAN RouteX CnC Domain (dcb5684707f6c66492aaa9f7d9bfb5a6 .biz in DNS Lookup); [1] |
| 25,400 | 2017/11/07 | 2024958 | ET TROJAN RouteX CnC Domain (73780fbd309561e201a4aee9914d882d .org in DNS Lookup); [1] |
| 25,399 | 2017/11/07 | 2024957 | ET TROJAN RouteX CnC Domain (0a0074066c49886a39b5a3072582f5d6 .net in DNS Lookup); [1] |
| 25,398 | 2017/11/07 | 2024962 | ET TROJAN RouteX CnC Domain (aaafc94b3a37b75ae9cb60afc42e86fe .org in DNS Lookup); [1] |
| 25,397 | 2017/11/07 | 2024960 | ET TROJAN RouteX CnC Domain (322ffbbc7c1b312c2f9d942f20422f8d .com in DNS Lookup); [1] |
| 25,396 | 2017/11/07 | 2024963 | ET TROJAN RouteX CnC Domain (c13a856f4a879a89e9a638207efd6c94 .biz in DNS Lookup); [1] |
| 25,395 | 2017/11/07 | 2024964 | ET TROJAN RouteX CnC Domain (2fa3c2fa16c47d9b9bff8986a42b048f .com in DNS Lookup); [1] |
| 25,394 | 2017/11/04 | 2024953 | ET MOBILE_MALWARE Android Marcher Trojan Download - Austrian Bank Targeting; |
| 25,393 | 2017/11/04 | 2024952 | ET MOBILE_MALWARE Android Marcher Trojan Download - BankAustria Targeting (set); |
| 25,392 | 2017/11/04 | 2024947 | ET CURRENT_EVENTS Successful Raiffeisen Phish Nov 03 2017; |
| 25,391 | 2017/11/04 | 2024951 | ET MOBILE_MALWARE Android Marcher Trojan Download - Sparkasse Bank Targeting (set); |
| 25,390 | 2017/11/04 | 2024949 | ET CURRENT_EVENTS Successful BankAustria Phish Nov 03 2017; |
| 25,389 | 2017/11/04 | 2024945 | ET CURRENT_EVENTS SOCENG Fake Update/Installer ForceDL Template Nov 03 2017; |
| 25,388 | 2017/11/04 | 2024944 | ET CURRENT_EVENTS Sparkasse Phishing Domain Nov 03 2017; |
| 25,387 | 2017/11/04 | 2024948 | ET CURRENT_EVENTS Successful Sparkasse Phish Nov 03 2017; |
| 25,386 | 2017/11/04 | 2024946 | ET CURRENT_EVENTS BankAustria Phishing Domain Nov 03 2017; |
| 25,385 | 2017/11/04 | 2024943 | ET CURRENT_EVENTS Raiffeisen Phishing Domain Nov 03 2017; |
| 25,384 | 2017/11/04 | 2024950 | ET MOBILE_MALWARE Android Marcher Trojan Download - Raiffeisen Bank Targeting (set); |
| 25,383 | 2017/11/03 | 2024942 | ET CURRENT_EVENTS 401TRG Successful Multi-Email Phish - Observed in Docusign/Dropbox/Onedrive/Gdrive Nov 02 2017; |
| 25,382 | 2017/11/02 | 2024941 | ET EXPLOIT Possible Oracle Identity Manager Attempt to Logon with default account; [1] |
| 25,381 | 2017/11/01 | 2024934 | ET TROJAN IoT_reaper DNS Lookup M5; [1] |
| 25,380 | 2017/11/01 | 2024935 | ET TROJAN IoT_reaper DNS Lookup M6; [1] |
| 25,379 | 2017/11/01 | 2024937 | ET TROJAN Downeks/Quasar DNS Lookup (cloudns .club); [1] |
| 25,378 | 2017/11/01 | 2024940 | ET TROJAN Downeks/Quasar DNS Lookup (moreoffer .life); [1] |
| 25,377 | 2017/11/01 | 2024938 | ET TROJAN Downeks/Quasar DNS Lookup (topsite .life); [1] |
| 25,376 | 2017/11/01 | 2024936 | ET TROJAN IoT_reaper DNS Lookup M7; [1] |
| 25,375 | 2017/11/01 | 2024939 | ET TROJAN Downeks/Quasar DNS Lookup (updatesforme .club); [1] |
| 25,374 | 2017/11/01 | 2024933 | ET TROJAN IoT_reaper DNS Lookup M4; [1] |
| 25,373 | 2017/10/28 | 2024932 | ET CURRENT_EVENTS Possible BACKSWING JS Framework POST Observed; [1] |
| 25,372 | 2017/10/27 | 2024931 | ET ATTACK_RESPONSE 401TRG Perl DDoS IRCBot File Download; |
| 25,371 | 2017/10/27 | 2024930 | ET WEB_SERVER 401TRG Generic Webshell Request - POST with wget in body; |
| 25,370 | 2017/10/26 | 2024921 | ET TROJAN IoT_reaper DNS Lookup M1; [1] |
| 25,369 | 2017/10/26 | 2024924 | ET TROJAN Possible IoT_reaper ELF Binary Request M1 (set); [1] |
| 25,368 | 2017/10/26 | 2024925 | ET TROJAN Possible IoT_reaper ELF Binary Request M2 (set); [1] |
| 25,367 | 2017/10/26 | 2024917 | ET EXPLOIT AVTECH Unauthenticated Command Injection in DVR Devices; [1] |
| 25,366 | 2017/10/26 | 2024915 | ET EXPLOIT Possible Vacron NVR Remote Command Execution; [1] |
| 25,365 | 2017/10/26 | 2024928 | ET TROJAN Possible IoT_reaper ELF Binary Request M5 (set); [1] |
| 25,364 | 2017/10/26 | 2024918 | ET EXPLOIT AVTECH Authenticated Command Injection in CloudSetup.cgi; [1] |
| 25,363 | 2017/10/26 | 2024919 | ET EXPLOIT AVTECH Authenticated Command Injection in adcommand.cgi; [1] |
| 25,362 | 2017/10/26 | 2024916 | ET EXPLOIT Netgear DGN Remote Command Execution; [1] |
| < 31 32 33 34 35 36 37 38 39 40 > |