시그니처 리스트, Signature List
번호날짜ID시그니처 (Total Ruleset: 27,111개)
23,7112016/10/22 2023367  ET TROJAN APT28/Sednit DNS Lookup (kg-news .org); [1] 
23,7102016/10/22 2023362  ET TROJAN APT28/Sednit DNS Lookup (defenceiq .us); [1] 
23,7092016/10/22 2023363  ET TROJAN APT28/Sednit DNS Lookup (defencereview .eu); [1] 
23,7082016/10/22 2023365  ET TROJAN APT28/Sednit DNS Lookup (euronews24 .info); [1] 
23,7072016/10/22 2023366  ET TROJAN APT28/Sednit DNS Lookup (euroreport24 .com); [1] 
23,7062016/10/22 2023364  ET TROJAN APT28/Sednit DNS Lookup (diplomatnews .org); [1] 
23,7052016/10/22 2023357  ET TROJAN APT28/Sednit DNS Lookup (ausameetings .com); [1] 
23,7042016/10/22 2023361  ET TROJAN APT28/Sednit DNS Lookup (dailypoliticsnews .com); [1] 
23,7032016/10/22 2023359  ET TROJAN APT28/Sednit DNS Lookup (cnnpolitics .eu); [1] 
23,7022016/10/22 2023358  ET TROJAN APT28/Sednit DNS Lookup (bbc-press .org); [1] 
23,7012016/10/22 2023354  ET TROJAN Observed AgentTesla Domain Request;  
23,7002016/10/22 2023356  ET TROJAN APT28/Sednit DNS Lookup (aljazeera-news .com); [1] 
23,6992016/10/22 2023360  ET TROJAN APT28/Sednit DNS Lookup (dailyforeignnews .com); [1] 
23,6982016/10/22 2023355  ET TROJAN APT28/Sednit DNS Lookup (microsoftsupp .com); [1] 
23,6972016/10/19 2023347  ET TROJAN ABUSE.CH SSL Fingerprint Blacklist Malicious SSL Certificate Detected (Gootkit C2); [1] 
23,6962016/10/19 2023348  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM); [1] 
23,6952016/10/19 2023343  ET CURRENT_EVENTS Evil Redirector Leading to EK EITest Inject Oct 17 2016;  
23,6942016/10/19 2023344  ET TROJAN APT28 DealersChoice.B DNS Lookup (appexsrv .net); [1] 
23,6932016/10/19 2023342  ET TROJAN Malicious SSL certificate detected (Powershell Trojan); [1] 
23,6922016/10/19 2023345  ET TROJAN Win32/CryPy Ransomware CnC Checkin; [1] 
23,6912016/10/19 2023346  ET TROJAN Win32/CryPy Ransomware Encrypting File; [1] 
23,6902016/10/15 2023340  ET TROJAN Unknown Potentially Malicious Traffic 2;  
23,6892016/10/15 2023341  ET TROJAN Unknown Potentially Malicious Traffic 3;  
23,6882016/10/15 2023338  ET TROJAN TheTrick Banking Trojan User-Agent;  
23,6872016/10/15 2023339  ET TROJAN Unknown Potentially Malicious Traffic 1;  
23,6862016/10/15 2023337  ET TROJAN Win32/Infostealer.Snifula File Upload;  
23,6852016/10/13 2023336  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM); [1] 
23,6842016/10/13 2023334  ET TROJAN Enigma Locker Checkin; [1] 
23,6832016/10/13 2023335  ET TROJAN Nuke Ransomware Checkin; [1] 
23,6822016/10/12 2023333  ET TROJAN Linux.Mirai Login Attempt (xc3511); [1] 
23,6812016/10/09 2023331  ET TROJAN CryptoWall/TeslaCrypt Payment Domain;  
23,6802016/10/09 2023332  ET TROJAN CryptoWall/TeslaCrypt Payment Domain;  
23,6792016/10/09 2023330  ET TROJAN CryptoWall/TeslaCrypt Payment Domain;  
23,6782016/10/09 2023329  ET TROJAN ABUSE.CH Locky Payment Domain Detected; [1] 
23,6772016/10/09 2023328  ET TROJAN ABUSE.CH TorrenLocker Payment Domain Detected; [1] 
23,6762016/10/09 2023327  ET TROJAN ABUSE.CH TorrenLocker Payment Domain Detected; [1] 
23,6752016/10/06 2023326  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM); [1] 
23,6742016/10/06 2023325  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM); [1] 
23,6732016/10/06 2023324  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM); [1] 
23,6722016/10/06 2023322  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM); [1] 
23,6712016/10/06 2023323  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM); [1] 
23,6702016/10/06 2023321  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM); [1] 
23,6692016/10/06 2023319  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM); [1] 
23,6682016/10/06 2023320  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM); [1] 
23,6672016/10/06 2023318  ET CURRENT_EVENTS Nemucod Downloader Oct 04;  
23,6662016/10/06 2023317  ET EXPLOIT BIND9 msg->reserved Assertion DoS Packet Inbound (CVE-2016-2776); [1] 
23,6652016/10/05 2023316  ET CURRENT_EVENTS Possible Locky AlphaNum Downloader Oct 3 2016;  
23,6642016/10/05 2023313  ET CURRENT_EVENTS Flash Exploit Likely SunDown EK;  
23,6632016/10/05 2023314  ET CURRENT_EVENTS SunDown EK Landing Oct 03 2016;  
23,6622016/10/05 2023312  ET CURRENT_EVENTS Evil Redirector Leading to EK (EITest Inject) Oct 03 2016;  
< 61  62  63  64  65  66  67  68  69  70 >
GigaVPN & GigaIPS is based MikroTik, Suricata and EmergingThreats.
Copyright ⓒ 2010 . All Rights Reserved.