Search
Keyword: Possible_OLGM-23
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. However, as of this writing, the said sites are inaccessible.
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It does not have any propagation routine. It does not have any backdoor routine.
This backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. However, as of this writing, the said sites are inaccessible.
This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and Folder Options.
This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and Folder Options.
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes the initially executed copy of itself.
* indicates a new version of an existing rule Deep Packet Inspection Rules: Web Server Miscellaneous 1011933 - Apache Struts2 Remote Code Execution Vulnerability (CVE-2023-50164) Integrity Monitoring Rules: There are no new...
* indicates a new version of an existing rule Deep Packet Inspection Rules: Web Application Common 1011808 - Progress MOVEit Transfer SQL Injection Vulnerability (CVE-2023-36934) Integrity Monitoring Rules: There are no new or u...
* indicates a new version of an existing rule Deep Packet Inspection Rules: Web Server Miscellaneous 1009265 - Apache Struts OGNL Expression Remote Command Execution Vulnerability (CVE-2018-11776) Integrity Monitoring Rules: ...
* indicates a new version of an existing rule Deep Packet Inspection Rules: Web Server Miscellaneous 1011899 - Atlassian Confluence Data Center and Server Improper Authorization Vulnerability (CVE-2023-22518) Integrity Monit...
This Trojan Spy arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
* indicates a new version of an existing rule Deep Packet Inspection Rules: DNS Client 1011875 - Exim Integer Underflow Vulnerability (CVE-2023-42118) Mail Server Exim 1011874 - Exim Remote Code Execution Vulnerability (CVE-2...
NOTES: Protocol: HTTPS Risk Type: OTHERS (Note: OTHERS can be network connections related to hacking attempts, exploits, connections done by grayware, or suspicious traffic.) Threat Type: Suspicious Behavior Confidence Level: High Sever...
* indicates a new version of an existing rule Deep Packet Inspection Rules: Database Oracle 1009306 - Oracle PL/SQL Procedures Arbitrary SQL Command Execution Vulnerability (CVE-2004-1370) Web Application Common 1009264 - Gi...
NOTES: Attack Phase: Lateral Movement Protocol: SMB Risk Type: OTHERS (Note: OTHERS can be network connections related to hacking attempts, exploits, connections done by grayware, or suspicious traffic.) Threat Type: Suspicious Behavior...
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.