Search

* indicates a new version of an existing rule Deep Packet Inspection Rules: Mail Server Common 1010145 - OpenBSD OpenSMTPD Remote Command Execution Vulnerability (CVE-2020-7247) OpenSSL Client 1006920* - OpenSSL Client X509_...

Windows 2000, Windows Server 2003, Windows XP (32-bit, 64-bit), Windows Vista (32-bit, 64-bit), Windows 7 (32-bit, 64-bit), Windows 10 (32-bit, 64-bit) NOTES: This is the pattern for GeneriClean. GeneriClean is a Trend Micro technology t...

* indicates a new version of an existing rule Deep Packet Inspection Rules: Apache Solr RMI 1010116* - Apache Solr Remote Code Execution Vulnerability (CVE-2019-12409) DNS Server 1010118* - ISC BIND 'EDNS0' Key-Tag Memory Le...

This is Trend Micro detection for packets passing through HTTP network protocols that can be used as Command and Control Communication. This also indicates a malware infection. Below are some indicators of an infected host: Excessive spamming, exploi...

This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Trojan takes advantage of certain vulnerabilities.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It takes advantage of certain vulnerabilities.

This malware is related to the campaign that targeted TV and government-related websites in Hong Kong and Taiwan. In the said campaign, attackers used Flash exploits that emerged from the Hacking Team leak to deliver PoisonIvy. This Trojan executes ...

This backdoor arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It d...

This backdoor arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It executes commands from a remote malicious user, effectively compromising the affected system. It takes advantage of certain vulnerabili...

This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It doe...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Exploit arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It may be hosted on a website and run when a user accesses the said website. It requires being executed w...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Exploit arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. As of...

This Exploit arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

First SYKIPOT variants were spotted in 2007. These backdoors are usually dropped by other malware exploiting vulnerabilities. SYKIPOT backdoors steal the following information, which it sends to its C&C server: Active network connections Adapter info...

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It drops files as ransom note.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.