Search

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to a website to send and receive information.

A denial of service vulnerability exists in the way the Local Security Authority Subsystem Service (LSASS) handles authentication req...

This worm arrives by connecting affected removable drives to a system. It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It opens certain ports to access shared netw...

Microsoft addresses the following vulnerabilities in its January batch of patches: (MS17-003) Security Update for Adobe Flash Player (3214628) Risk Rating: Critical This security update resolves...

Windows Other Details This Hacking Tool does the following: It monitors the activity of a process to detect EDR implementation and subsequently bypasses the detection mechanisms. It employs techniques utilized to bypass...

This Hacking Tool arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It does not have any propagation routine. It does not have any backdoor routine.

This Hacking Tool arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes commands from a remote malicious user, effectively compromising the affected system.

This Hacking Tool arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Windows Installation This Hacking Tool adds the following processes: {Grayware File Path}\{Grayware File Name}.exe Dropping Routine This Hacking Tool drops the following files: {Grayware File Path}\Ntoskrnl.pdb → delet...

This Trojan arrives via removable drives. It may be dropped by other malware.

* indicates a new version of an existing rule Deep Packet Inspection Rules: BIND RNDC 1008099 - ISC BIND rndc Control Channel Denial Of Service Vulnerability (CVE-2016-1285) DCERPC Services 1007596* - Identified Possible Ran...

* indicates a new version of an existing rule Deep Packet Inspection Rules: DCERPC Services 1008119* - Microsoft Windows Local Security Authority Subsystem Service (LSASS) Denial Of Service Vulnerability (CVE-2017-0004) DHC...

* indicates a new version of an existing rule Deep Packet Inspection Rules: DCERPC Services 1008119* - Microsoft Windows Local Security Authority Subsystem Service (LSASS) Denial Of Service Vulnerability (CVE-2017-0004) 100812...

* indicates a new version of an existing rule Deep Packet Inspection Rules: DCERPC Services 1008119* - Microsoft Windows Local Security Authority Subsystem Service (LSASS) Denial Of Service Vulnerability (CVE-2017-0004) 10081...

* indicates a new version of an existing rule Deep Packet Inspection Rules: DCERPC Services 1008119* - Microsoft Windows Local Security Authority Subsystem Service (LSASS) Denial Of Service Vulnerability (CVE-2017-0004) 10...

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. However, as of this writing, the said sites are inaccessible. It drops files as ransom note.

* indicates a new version of an existing rule Deep Packet Inspection Rules: DCERPC Services 1009490* - Block Administrative Share - 1 (ATT&CK T1021.002) 1007596* - Identified Possible Ransomware File Extension Rename Activity Ov...

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It drops files as ransom note. It avoids encrypting files with the following file extensions.

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It propagates via shared networks and drops copies of itself into available networks. It encrypts file...

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes commands from a remote malicious user, effectively compromising the affected system. However...