Search

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It listens on ports. It performs denial of service (DoS) attacks on affected systems using specific floo...

This is an updated Bashlite malware designed to add infected internet-of-things devices to a distributed-denial-of-service (DDoS) botnet. This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by use...

This backdoor may spread to other devices by abusing a Remote Code Execution exploit in Huawei routers. This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. ...

This malware exploits an Adobe Flash zero-day vulnerability. When a system is exploited successfully, it allows a remote user to execute arbitrary code on the system. To get a one-glance comprehensive view of the behavior of this Trojan, refer to the...

* indicates a new version of an existing rule Deep Packet Inspection Rules: Linux Kernel TIPC 1011263 - Linux Kernel TIPC Heap Buffer Overflow Vulnerability (CVE-2021-43267) SolarWinds Network Performance Monitor 1011230* - ...

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. As of this writing, the said sites are inaccessible.

This Trojan may be downloaded by other malware/grayware from remote sites. It arrives as a component bundled with malware/grayware packages.

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes commands from a remote malicious user, effectively compromising the affected system. It dele...

This Coinminer arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Trojan may be downloaded by other malware/grayware from remote sites.

* indicates a new version of an existing rule Deep Packet Inspection Rules: Database IBM Informix Dynamic Server 1010458* - IBM Informix Dynamic Server Directory Traversal Vulnerability Directory Server LDAP 1010491* - Mic...

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It encrypts files found in specific folders. It drops files as ransom note. It avoids encrypting files...

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It may be downloaded by other malware/grayware from remote sites. It executes commands from a remote mal...

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes commands from a remote malicious user, effectively compromising the affected system.

* indicates a new version of an existing rule Deep Packet Inspection Rules: DCERPC Services 1011105* - Identified File Deletion From SMB Share (ATT&CK T1070.004) DNS Server 1011102* - PowerDNS Authoritative Server Denial of...

This backdoor may be hosted on a website and run when a user accesses the said website. It executes commands from a remote malicious user, effectively compromising the affected system. It retrieves specific information from the affected system. This...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It takes advantage of certain vulnerabilities.

* indicates a new version of an existing rule Deep Packet Inspection Rules: DCERPC Services 1009490* - Block Administrative Share - 1 (ATT&CK T1021.002) 1007596* - Identified Possible Ransomware File Extension Rename Activity Ov...

This Trojan may be downloaded by other malware/grayware from remote sites. It requires its main component to successfully perform its intended routine. It deletes itself after execution.