Search

This backdoor may spread to other devices by abusing a Remote Code Execution exploit in Huawei routers. This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. ...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

* indicates a new version of an existing rule Deep Packet Inspection Rules: Linux Kernel TIPC 1011263 - Linux Kernel TIPC Heap Buffer Overflow Vulnerability (CVE-2021-43267) SolarWinds Network Performance Monitor 1011230* - ...

This malware exploits an Adobe Flash zero-day vulnerability. When a system is exploited successfully, it allows a remote user to execute arbitrary code on the system. To get a one-glance comprehensive view of the behavior of this Trojan, refer to the...

This Trojan may be downloaded by other malware/grayware from remote sites.

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes commands from a remote malicious user, effectively compromising the affected system. It dele...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. As of this writing, the said sites are inaccessible.

This Trojan may be downloaded by other malware/grayware from remote sites. It arrives as a component bundled with malware/grayware packages.

This Coinminer arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

* indicates a new version of an existing rule Deep Packet Inspection Rules: Database IBM Informix Dynamic Server 1010458* - IBM Informix Dynamic Server Directory Traversal Vulnerability Directory Server LDAP 1010491* - Mic...

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It may be downloaded by other malware/grayware from remote sites. It executes commands from a remote mal...

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It encrypts files found in specific folders. It drops files as ransom note. It avoids encrypting files...

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes commands from a remote malicious user, effectively compromising the affected system.

* indicates a new version of an existing rule Deep Packet Inspection Rules: DCERPC Services 1011105* - Identified File Deletion From SMB Share (ATT&CK T1070.004) DNS Server 1011102* - PowerDNS Authoritative Server Denial of...

This backdoor may be hosted on a website and run when a user accesses the said website. It executes commands from a remote malicious user, effectively compromising the affected system. It retrieves specific information from the affected system. This...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It takes advantage of certain vulnerabilities.

* indicates a new version of an existing rule Deep Packet Inspection Rules: DCERPC Services 1009490* - Block Administrative Share - 1 (ATT&CK T1021.002) 1007596* - Identified Possible Ransomware File Extension Rename Activity Ov...

This Trojan may be downloaded by other malware/grayware from remote sites. It requires its main component to successfully perform its intended routine. It deletes itself after execution.

This backdoor may be hosted on a website and run when a user accesses the said website. It executes commands from a remote malicious user, effectively compromising the affected system. It retrieves specific information from the affected system. This...