시그니처 리스트, Signature List
번호날짜ID시그니처 (Total Ruleset: 27,111개)
26,8112018/09/28 2026372  ET MOBILE_MALWARE Android APT-C-23 (nissour-beton .com in TLS SNI); [1
26,8102018/09/28 2026371  ET MOBILE_MALWARE Android APT-C-23 (nissour-beton .com in DNS Lookup); [1
26,8092018/09/28 2026373  ET MOBILE_MALWARE Android APT-C-23 (buymicrosft .com in DNS Lookup); [1
26,8082018/09/28 2026378  ET MOBILE_MALWARE Android APT-C-23 (lincoln-blake .website in TLS SNI); [1
26,8072018/09/28 2026374  ET MOBILE_MALWARE Android APT-C-23 (buymicrosft .com in TLS SNI); [1
26,8062018/09/28 2026365  ET MOBILE_MALWARE Android APT-C-23 (bob-turco .website in DNS Lookup); [1
26,8052018/09/28 2026366  ET MOBILE_MALWARE Android APT-C-23 (bob-turco .website in TLS SNI); [1
26,8042018/09/28 2026377  ET MOBILE_MALWARE Android APT-C-23 (lincoln-blake .website in DNS Lookup); [1
26,8032018/09/28 2026368  ET MOBILE_MALWARE Android APT-C-23 (flirtymania .fun in TLS SNI); [1
26,8022018/09/28 2026369  ET MOBILE_MALWARE Android APT-C-23 (lexi-branson .website in DNS Lookup); [1
26,8012018/09/28 2026370  ET MOBILE_MALWARE Android APT-C-23 (lexi-branson .website in TLS SNI); [1
26,8002018/09/28 2026367  ET MOBILE_MALWARE Android APT-C-23 (flirtymania .fun in DNS Lookup); [1
26,7992018/09/27 2026363  ET TROJAN MS_D0wnl0ad3r Checkin;  
26,7982018/09/25 2026361  ET TROJAN MS_D0wnl0ad3r Screenshot Upload;  
26,7972018/09/25 2026362  ET CURRENT_EVENTS Successful Generic Phish (set) 2018-09-24;  
26,7962018/09/23 2026360  ET CURRENT_EVENTS Successful Generic Phish (set) 2018-09-21;  
26,7952018/09/23 2026345  ET MOBILE_MALWARE Android APT-C-23 (bitgames .world in DNS Lookup); [1
26,7942018/09/23 2026352  ET MOBILE_MALWARE Android APT-C-23 (nightchat .fun in TLS SNI); [1
26,7932018/09/23 2026356  ET MOBILE_MALWARE Android APT-C-23 (firesky .site in TLS SNI); [1
26,7922018/09/23 2026355  ET MOBILE_MALWARE Android APT-C-23 (firesky .site in DNS Lookup); [1
26,7912018/09/23 2026348  ET MOBILE_MALWARE Android APT-C-23 (fatehmedia .site in TLS SNI); [1
26,7902018/09/23 2026357  ET MOBILE_MALWARE Android APT-C-23 (lets-see .site in DNS Lookup); [1
26,7892018/09/23 2026343  ET MOBILE_MALWARE Android APT-C-23 (new .filetea .me in DNS Lookup); [1
26,7882018/09/23 2026340  ET MOBILE_MALWARE Android APT-C-23 (fasebookvideo .com in TLS SNI); [1
26,7872018/09/23 2026344  ET MOBILE_MALWARE Android APT-C-23 (new .filetea .me in TLS SNI); [1
26,7862018/09/23 2026342  ET MOBILE_MALWARE Android APT-C-23 (leonard-kim .website in TLS SNI); [1
26,7852018/09/23 2026349  ET MOBILE_MALWARE Android APT-C-23 (leslie-barnes .website in DNS Lookup); [1
26,7842018/09/23 2026359  ET MOBILE_MALWARE Android APT-C-23 (nightchat .live in DNS Lookup); [1
26,7832018/09/23 2026341  ET MOBILE_MALWARE Android APT-C-23 (leonard-kim .website in DNS Lookup); [1
26,7822018/09/23 2026353  ET MOBILE_MALWARE Android APT-C-23 (black-honey .club in DNS Lookup); [1
26,7812018/09/23 2026339  ET MOBILE_MALWARE Android APT-C-23 (fasebookvideo .com in DNS Lookup); [1
26,7802018/09/23 2026351  ET MOBILE_MALWARE Android APT-C-23 (nightchat .fun in DNS Lookup); [1
26,7792018/09/23 2026354  ET MOBILE_MALWARE Android APT-C-23 (black-honey .club in TLS SNI); [1
26,7782018/09/23 2026347  ET MOBILE_MALWARE Android APT-C-23 (fatehmedia .site in DNS Lookup); [1
26,7772018/09/23 2026358  ET MOBILE_MALWARE Android APT-C-23 (lets-see .site in TLS SNI); [1
26,7762018/09/23 2026346  ET MOBILE_MALWARE Android APT-C-23 (bitgames .world in TLS SNI); [1
26,7752018/09/23 2026350  ET MOBILE_MALWARE Android APT-C-23 (leslie-barnes .website in TLS SNI); [1
26,7742018/09/22 2026338  ET WEB_SERVER JSP.SJavaWebManage WebShell Pass 20-09-2018 2;  
26,7732018/09/22 2026337  ET WEB_SERVER JSP.SJavaWebManage WebShell Pass 20-09-2018 1;  
26,7722018/09/22 2026336  ET WEB_SERVER JSP.SJavaWebManage WebShell Access;  
26,7712018/09/22 2026335  ET TROJAN Xbash CnC DNS Lookup (3g2upl4pq6kufc4m .tk); [1
26,7702018/09/22 2026334  ET TROJAN Xbash CnC DNS Lookup (vfk2k5s5tfjr27tz .tk); [1
26,7692018/09/22 2026333  ET TROJAN HTML/Xbash Hex Encoded PS WebClient Object Inbound - Stage 1; [1
26,7682018/09/22 2026332  ET TROJAN HTML/Xbash Hex Encoded WScript.Shell Inbound - Stage 1; [1
26,7672018/09/22 2026331  ET TROJAN HTML/Xbash Hex Encoded PowerShell Args Inbound - Stage 1; [1
26,7662018/09/22 2026329  ET TROJAN Xbash CnC DNS Lookup (scanaan .tk); [1
26,7652018/09/22 2026330  ET TROJAN Xbash CnC DNS Lookup (blockbitcoin .com); [1
26,7642018/09/22 2026328  ET TROJAN Xbash CnC DNS Lookup (realnewstime .xyz); [1
26,7632018/09/22 2026322  ET MOBILE_MALWARE Android APT-C-23 (billy-bones .info in TLS SNI); [1
26,7622018/09/22 2026327  ET TROJAN Xbash CnC DNS Lookup (leakingprivacy .tk); [1
1  2  3  4  5  6  7  8  9  10 >
GigaVPN & GigaIPS is based MikroTik, Suricata and EmergingThreats.
Copyright ⓒ 2010 . All Rights Reserved.