시그니처 리스트, Signature List
번호날짜ID시그니처 (Total Ruleset: 27,111개)
23,8612016/11/18 2023519  ET POLICY Android Adups Firmware DNS Query 5; [1] 
23,8602016/11/18 2023515  ET POLICY Android Adups Firmware DNS Query; [1] 
23,8592016/11/18 2023514  ET POLICY Android Adups Firmware Checkin; [1] 
23,8582016/11/17 2023512  ET EXPLOIT REDIS Attempted SSH Key Upload; [1] 
23,8572016/11/17 2023513  ET CURRENT_EVENTS Evil Redirector Leading to EK Nov 15 2016;  
23,8562016/11/17 2023508  ET MOBILE_MALWARE Android.Trojan.HiddenApp.OU Checkin 2; [1] 
23,8552016/11/17 2023509  ET MOBILE_MALWARE Android.Trojan.HiddenApp.OU SSL CnC Cert;  
23,8542016/11/17 2023511  ET EXPLOIT REDIS Attemted SSH Authorized Key Writing Attempt; [1] 
23,8532016/11/17 2023507  ET MOBILE_MALWARE Android.Trojan.HiddenApp.OU Checkin; [1] 
23,8522016/11/17 2023510  ET SCAN Redis SSH Key Overwrite Probing; [1] 
23,8512016/11/16 2023504  ET TROJAN XRatLocker/AiraCrop Ransomware Payment Domain; [1] 
23,8502016/11/16 2023505  ET TROJAN CerberTear Ransomware CnC Checkin;  
23,8492016/11/16 2023506  ET TROJAN MSIL/Alcatrez Locker Ransomware CnC Checkin;  
23,8482016/11/16 2023503  ET TROJAN XRatLocker/AiraCrop Ransomware Payment Domain; [1] 
23,8472016/11/13 2023500  ET MOBILE_MALWARE Possible iOS WebView Auto Dialer 1; [1] 
23,8462016/11/13 2023497  ET DOS Microsoft Windows LSASS Remote Memory Corruption; [1] 
23,8452016/11/13 2023502  ET TROJAN ABUSE.CH SSL Fingerprint Blacklist Malicious SSL Certificate Detected (Gootkit C2); [1] 
23,8442016/11/13 2023499  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (FindPOS CnC); [1] 
23,8432016/11/13 2023501  ET MOBILE_MALWARE Possible iOS WebView Auto Dialer 2; [1] 
23,8422016/11/13 2023498  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM); [1] 
23,8412016/11/12 2023496  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Vawtrak CnC); [1] 
23,8402016/11/11 2023495  ET CURRENT_EVENTS Possible Cartasi Phishing Domain Nov 8;  
23,8392016/11/10 2023490  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM);  
23,8382016/11/10 2023489  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM);  
23,8372016/11/10 2023493  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM);  
23,8362016/11/10 2023494  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM);  
23,8352016/11/10 2023487  ET CURRENT_EVENTS Successful Tesco Bank Phish M1 Nov 08 2016;  
23,8342016/11/10 2023488  ET CURRENT_EVENTS Successful Tesco Bank Phish M2 Nov 08 2016;  
23,8332016/11/10 2023491  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM);  
23,8322016/11/10 2023492  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Gozi MITM);  
23,8312016/11/10 2023486  ET TROJAN Sednit/APT28/Sofacy Delphocy CnC Beacon; [1] 
23,8302016/11/09 2023485  ET TROJAN Unknown Malicious JS Checkin;  
23,8292016/11/09 2023484  ET EXPLOIT Possible iOS Pegasus Safari Exploit (CVE-2016-4657); [1] 
23,8282016/11/06 2022970  ET TROJAN W32.Dreambot File Upload (No Data Sent);  
23,8272016/11/04 2023482  ET CURRENT_EVENTS Evil Redirector Leading to EK EITest Inject Oct 17 2016 M2;  
23,8262016/11/04 2023483  ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher Sending Credit Card Info; [1] 
23,8252016/11/03 2023476  ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex); [1] 
23,8242016/11/03 2023475  ET MOBILE_MALWARE Adware.Adwo.A;  
23,8232016/11/03 2023473  ET CURRENT_EVENTS DNSChanger EK Secondary Landing Oct 31 2016;  
23,8222016/11/03 2023481  ET TROJAN MSIL/HadesLocker Ransomware Checkin;  
23,8212016/11/03 2023472  ET POLICY OpenDNS IP Lookup;  
23,8202016/11/03 2023471  ET CURRENT_EVENTS Possible Malicious Tor Module Download;  
23,8192016/11/03 2023479  ET TROJAN Moose CnC Request M2; [1] 
23,8182016/11/03 2023478  ET TROJAN Moose CnC Response; [1] 
23,8172016/11/03 2023480  ET CURRENT_EVENTS Sundown/Xer EK Landing Jul 06 2016 M1; [1] 
23,8162016/11/03 2023477  ET TROJAN Moose CnC Request M1; [1] 
23,8152016/11/03 2023474  ET CURRENT_EVENTS Evil Redirector Leading to EK Nov 01 2016;  
23,8142016/11/01 2023470  ET TROJAN Possible Emissary External IP Lookup; [1] 
23,8132016/11/01 2023469  ET POLICY External IP Address Lookup - b4secure .com; [1] 
23,8122016/11/01 2023467  ET EXPLOIT COMTREND ADSL Router CT-5367 Remote DNS Change Attempt; [1] 
< 61  62  63  64  65  66  67  68  69  70 >
GigaVPN & GigaIPS is based MikroTik, Suricata and EmergingThreats.
Copyright ⓒ 2010 . All Rights Reserved.