시그니처 리스트, Signature List
번호날짜ID시그니처 (Total Ruleset: 27,111개)
16,8612015/01/20 2019826  ET TROJAN W32/Coinminer.Backdoor CnC Beacon;  
16,8602015/01/20 2019825  ET POLICY Cryptexplorer API Check - Potential CoinMiner Traffic;  
16,8592015/01/20 2019824  ET TROJAN W32/Hyteod.Downloader CnC Beacon;  
16,8582015/01/20 2019823  ET CURRENT_EVENTS WinHttpRequest Downloading EXE Non-Port 80 (Likely Exploit Kit);  
16,8572015/01/20 2019822  ET CURRENT_EVENTS WinHttpRequest Downloading EXE;  
16,8562015/01/20 2019821  ET INFO WinHttpRequest (flowbits no alert);  
16,8552015/01/20 2019819  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dyre CnC); [1] 
16,8542015/01/20 2019818  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dyre CnC); [1] 
16,8532015/01/20 2019815  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (KINS CnC); [1] 
16,8522015/01/20 2019814  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (KINS CnC); [1] 
16,8512015/01/20 2019813  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Hesperbot CnC); [1] 
16,8502015/01/20 2019812  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dyre CnC); [1] 
16,8492015/01/20 2019811  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (KINS CnC); [1] 
16,8482015/01/20 2019810  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dyre CnC); [1] 
16,8472015/01/20 2019809  ET TROJAN W32/DoubleTap.APT Downloader Socks5 Setup Request; [1] 
16,8462015/01/20 2019808  ET TROJAN W32/DoubleTap.APT Downloader CnC Beacon; [1] 
16,8452015/01/20 2019807  ET CURRENT_EVENTS KaiXin Landing Page Nov 25 2014;  
16,8442015/01/20 2019806  ET CURRENT_EVENTS Possible Internet Explorer CVE-2014-6332 Common Construct (Reversed);  
16,8432015/01/20 2019805  ET MOBILE_MALWARE Android.Stealthgenie Checkin; [1,2] 
16,8422015/01/20 2019804  ET WEB_SERVER PHP.//Input in HTTP POST; [1] 
16,8412015/01/20 2019803  ET EXPLOIT D-Link IP Camera Vulnerable HTTP Request (CVE-2013-1601); [1] 
16,8402015/01/20 2019802  ET EXPLOIT D-Link IP Camera Vulnerable HTTP Request (CVE-2013-1600); [1] 
16,8392015/01/20 2019801  ET EXPLOIT D-Link IP Camera Vulnerable HTTP Request (CVE-2013-1599); [1] 
16,8382015/01/20 2019800  ET CURRENT_EVENTS Magnitude Flash Payload;  
16,8372015/01/20 2019799  ET CURRENT_EVENTS Magnitude Flash Exploit (IE);  
16,8362015/01/20 2019798  ET CURRENT_EVENTS Malicious Iframe Leading to EK;  
16,8352015/01/20 2019797  ET CURRENT_EVENTS Possible Internet Explorer CVE-2014-6332 Common Construct DECCS;  
16,8342015/01/20 2019796  ET CURRENT_EVENTS Possible Internet Explorer CVE-2014-6332 Common Construct DECC;  
16,8332015/01/20 2019795  ET CURRENT_EVENTS Possible Internet Explorer CVE-2014-6332 Common Construct HEXCS;  
16,8322015/01/20 2019794  ET CURRENT_EVENTS Possible Internet Explorer CVE-2014-6332 Common Construct HEXC;  
16,8312015/01/20 2019793  ET CURRENT_EVENTS Possible Internet Explorer CVE-2014-6332 Common Construct HEX;  
16,8302015/01/20 2019792  ET CURRENT_EVENTS Possible Internet Explorer CVE-2014-6332 Common Construct URLENCODE;  
16,8292015/01/20 2019791  ET TROJAN HTTP Request to a *.cvredirect.ddns.net domain - CoinLocker Domain; [1] 
16,8282015/01/20 2019790  ET TROJAN DNS Query for Suspicious cvredirect.ddns.net Domain - CoinLocker Domain; [1] 
16,8272015/01/20 2019789  ET TROJAN HTTP Request to a *.cvredirect.no-ip.net domain - CoinLocker Domain; [1] 
16,8262015/01/20 2019788  ET TROJAN DNS Query for Suspicious cvredirect.no-ip.net Domain - CoinLocker Domain; [1] 
16,8252015/01/20 2019787  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dyre CnC); [1] 
16,8242015/01/20 2019786  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dyre CnC); [1] 
16,8232015/01/20 2019785  ET CURRENT_EVENTS PHISH PayPal - Landing Page;  
16,8222015/01/20 2019784  ET CURRENT_EVENTS AOL PHISH PayPal - Bank Account Phished;  
16,8212015/01/20 2019783  ET CURRENT_EVENTS AOL PHISH PayPal - Credit Card and SSN Phished;  
16,8202015/01/20 2019782  ET CURRENT_EVENTS AOL PHISH PayPal - Name Address Phished;  
16,8192015/01/20 2019781  ET CURRENT_EVENTS AOL PHISH PayPal - Creds Phished;  
16,8182015/01/20 2019780  ET TROJAN W32/CloudScout CnC Beacon;  
16,8172015/01/20 2019779  ET MALWARE PUP Win32/ELEX Checkin;  
16,8162015/01/20 2019778  ET EXPLOIT DLSw Information Disclosure CVE-2014-7992; [1,2] 
16,8152015/01/20 2019777  ET TROJAN CoinVault POST M2; [1] 
16,8142015/01/20 2019776  ET TROJAN CoinVault POST M1; [1] 
16,8132015/01/20 2019775  ET CURRENT_EVENTS Possible Internet Explorer CVE-2014-6332 Common Construct b64 3 (Observed in Archie EK);  
16,8122015/01/20 2019774  ET CURRENT_EVENTS Possible Internet Explorer CVE-2014-6332 Common Construct b64 2 (Observed in Archie EK);  
< 201  202  203  204  205  206  207  208  209  210 >
GigaVPN & GigaIPS is based MikroTik, Suricata and EmergingThreats.
Copyright ⓒ 2010 . All Rights Reserved.