Search

NOTES: Protocol: DNSRisk Type: OTHERS(Note: OTHERS can be network connections related to hacking attempts, exploits, connections done by grayware, or suspicious traffic.)Threat Type: Suspicious Behavior Confidence Level: LowSeverity: ...

NOTES: Attack Phase: Command and Control CommunicationProtocol: HTTPRisk Type: OTHERS(Note: OTHERS can be network connections related to hacking attempts, exploits, connections done by grayware, or suspicious traffic.)Threat Type: Sus...

NOTES: Attack Phase: Command and Control CommunicationProtocol: HTTPRisk Type: OTHERS(Note: OTHERS can be network connections related to hacking attempts, exploits, connections done by grayware, or suspicious traffic.)Threat Type: Sus...

NOTES: Attack Phase: Data ExfiltrationProtocol: HTTPRisk Type: OTHERS(Note: OTHERS can be network connections related to hacking attempts, exploits, connections done by grayware, or suspicious traffic.)Threat Type: Suspicious Behavior...

NOTES: Attack Phase: Data ExfiltrationProtocol: HTTPRisk Type: OTHERS(Note: OTHERS can be network connections related to hacking attempts, exploits, connections done by grayware, or suspicious traffic.)Threat Type: Suspicious Behavior...

This backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.It deletes itself after execution.

This Coinminer arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

SIMBOT is a backdoor family that accesses certain remote servers in order to receive commands from a remote attacker. The following are the executed commands on the affected system: Download and executes files Execute a DOS command sent by the remote...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.It does not have any propagation routine.It does not have any backdoor routine.It executes downloaded files...

This backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Trojan Spy arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for N/A.The host exhibiting this type of network behavior is likely compromised by malware, or being used by a malicious insider to gain unautho...

This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for N/A.The host exhibiting this type of network behavior is likely compromised by malware, or being used by a malicious insider to gain unautho...

This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for N/A.The host exhibiting this type of network behavior is likely compromised by malware, or being used by a malicious insider to gain unautho...

This is Trend Micro detection for DHCP network protocol that manifests exploit activities and can be used for N/A.The host exhibiting this type of network behavior is likely compromised by malware, or being used by a malicious insider to gain unautho...

* indicates a new version of an existing ruleDeep Packet Inspection Rules:DNS Client1011748 - Identified Cobalt Strike DNS Beacon Runtime Detection - 11011753 - Identified Cobalt Strike DNS Beacon Runtime Detection - 2Web Applic...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.