Search

(rolotech-electronics.comuf.com, speedtest1.hivelocity.net, 68.11.12.242) (STOP EXEC) - Stops a thread (STOP GET) - Stops GET floods (STOP SPEEDTEST) - Stops speedtest (STOP SYN) - Stops a SYN Flood (STOP UDP) - Stops UDP Flooding

Stops GET floods (STOP SPEEDTEST) - Stops speedtest (STOP SYN) - Stops a SYN Flood (STOP UDP) - Stops UDP Flooding (SYN) - Sends a SYN Flood (UDP) - Starts UDP Flooding (VERSION) - Print Version Other

from a remote malicious user: Scan ports 21, 22, 23, 25, 53, 80, 110, 143, 6665 of a specific IP Download a file Scan open ports of a specific hostname UDP Flooding Connect to an arbitrary socket

value as specified in /etc/login.defs Password and storage information Cron jobs Crontab contents Systemd timers Network and IP information ARP history Nameservers Default route Listening TCP Listening

Flood a specified channel/IRC user Flood server using port 6667 This malware uses two types of flooding attacks: the NICK flood and NOTICE flood. The NICK flood causes the channel window to be flooded

Description Name: VISEL TCP Request - Class 1 . This is the Trend Micro detection for malicious TCP network packet that manifest any of the following actions:Targeted AttackThis attack is used for Command and Control Communication

Description Name: HORRIB TCP Request - Class 1 . This is the Trend Micro detection for malicious TCP network packet that manifest any of the following actions:Targeted AttackThis attack is used for Command and Control Communication

Description Name: NUPIC - HTTP (Request) . This is the Trend Micro detection for malicious HTTP network packet that manifest any of the following actions:Targeted AttackThis attack is used for Command and Control Communication

find config.php in current directory show active connections show running services show user accounts show computers in the network show ARP Table show IP configuration Access database (MySQL and

services Show user accounts Show computer name Show ARP table Show IP Configuration Execute PHP Code Execute Arbitrary Code Manage Files (Change Access Permissions, Delete, Copy, Rename, Move, Read and

http://SJC1-TE-CMSAP1.sdi.trendnet.org/dumpImages/047201333850.jpeg On June 25, 2013, South Korea was hit with a cyber attack that affected several local government and news sites. We managed to

Description Name: APT - Possible GHOSTRAT - TCP .

Description Name: APT - Possible POISONIVY - TCP (Request) .

Description Name: APT - Possible BLYPT - HTTP (Request) .

Description Name: APT - Possible POISONIVY - TCP (Response) - Variant 2 .

Download a file Scan open ports of a specific hostname UDP Flooding Connect to an arbitrary socket Simultaneous IGMP, ICMP, UDP, TCP, HTTP flooding on open ports Dropped by other malware, Downloaded from the

remote malicious user: StartHTTP - starts an HTTP DDoS attack StartSlowloris - starts a Slowloris DDoS attack StartTCP - starts a TCP DDoS attack StartSSYN - starts SYN DDoS attack StartLayer7 - starts

Description Name: SYKIPOT - Server certificate - SSL . This is Trend Micro detection for packets passing through PROTOCOL_20 network protocols that manifests Targeted Attack activities which can be a potential intrusion. Below are some indicators of ...

ensure its automatic execution at every system startup by adding the following registry keys: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ Services\Attack\Parameters Other System Modifications This Trojan

The first android application designed to attack NFC devices. This is sample aims to bypass and make users to have free rides in public transportation This malicious app is designed to attack