Search

* indicates a new version of an existing ruleDeep Packet Inspection Rules:DNS Server1010633* - Identified DNS Trojan.Linux.Anchor.A Traffic1010613* - Identified DNS Trojan.Win32.Trickbot.Dns Traffic1010632* - Identified DNS...

This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This worm arrives by connecting affected removable drives to a system. It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.It uses Windows Task Scheduler to create a sc...

This worm arrives by connecting affected removable drives to a system. It arrives by accessing affected shared networks.It executes commands from a remote malicious user, effectively compromising the affected system.

This Trojan connects to certain URLs. It may do this to remotely inform a malicious user of its installation. It may also do this to download possibly malicious files onto the computer, which puts the computer at a greater risk of infection by other...

RAMNIT is a multi-component malware that infects .DLL, .EXE, and HTML files. This malware family is known to propagate via removable drives.RAMNIT steals sensitive information such as saved FTP credentials and browser cookies. It does this routine by...

RAMNIT is a multi-component malware that infects .DLL, .EXE, and HTML files. This malware family is known to propagate via removable drives.RAMNIT steals sensitive information such as saved FTP credentials and browser cookies. It does this routine by...

RAMNIT is a multi-component malware that infects .DLL, .EXE, and HTML files. This malware family is known to propagate via removable drives.RAMNIT steals sensitive information such as saved FTP credentials and browser cookies. It does this routine by...

RAMNIT is a multi-component malware that infects .DLL, .EXE, and HTML files. This malware family is known to propagate via removable drives.RAMNIT steals sensitive information such as saved FTP credentials and browser cookies. It does this routine by...

RAMNIT is a multi-component malware that infects .DLL, .EXE, and HTML files. This malware family is known to propagate via removable drives.RAMNIT steals sensitive information such as saved FTP credentials and browser cookies. It does this routine by...

RAMNIT is a multi-component malware that infects .DLL, .EXE, and HTML files. This malware family is known to propagate via removable drives.RAMNIT steals sensitive information such as saved FTP credentials and browser cookies. It does this routine by...

RAMNIT is a multi-component malware that infects .DLL, .EXE, and HTML files. This malware family is known to propagate via removable drives.RAMNIT steals sensitive information such as saved FTP credentials and browser cookies. It does this routine by...

This adware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.It modifies the Internet Explorer Zone Settings.It connects to certain websites to send and receive informa...

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

POISONIVY, also known as POISON, is a popular Remote Administration Tool (RAT) backdoor available in the underground market. It has been in circulation for years. In more recent times, this family of backdoors have been seen in targeted attacks. Simi...

This Coinminer arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.As of this writing, the said sites are inaccessible.

This Coinminer arrives as an attachment to email messages spammed by other malware/grayware or malicious users.It exploits software vulnerabilities to propagate to other computers across a network.It executes the downloaded files. As a result, malic...

This Trojan creates registry entries to enable its automatic execution at every system startup.It deletes itself after execution.