Search

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. However, as of this writing, the said sites are inaccessible.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Potentially Unwanted Application arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Backdoor requires being executed with a specific argument/parameter, an additional component, or in a specific environment in order to proceed with its intended routine.

* indicates a new version of an existing rule Deep Packet Inspection Rules: React Server 1012499 - Identified Suspicious React Gadgets SAP NetWeaver Java Application Server 1012455* - SAP NetWeaver AS JAVA Directory Travers...

* indicates a new version of an existing rule Deep Packet Inspection Rules: DNS Server 1012794 - Multiple DNS Resolvers DNSSEC KeyTrap Denial of Service Vulnerability (CVE-2023-50387) SSL/TLS Server 1012780* - eMudhra Compr...

Windows, Linux Arrival Details This malware arrives via the following means: This PHP script may be deployed and executed in a web server Other Details This Trojan does the following: It encrypts all files in the web server using...

* indicates a new version of an existing rule Deep Packet Inspection Rules: Mail Server Common 1011847 - Identified Img Over SMTP With Base64 Encoding (ATT&CK T1071.003) Unix Samba 1011797* - Samba Out-Of-Bounds Read Informat...

* indicates a new version of an existing rule Deep Packet Inspection Rules: Ivanti Avalanche 1011863* - Ivanti Avalanche Multiple Authentication Bypass Vulnerabilities Kubernetes API Server 1012165 - Kubernetes Ingress-Nginx...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. However, as of this writing, the said sites are inaccessible.

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes commands from a remote malicious user, effectively compromising the affected system.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. As of this writing, the said sites are inaccessible.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It is a component of other malware.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

NOTES: Heuristic Detection This is the Trend Micro heuristic detection for suspicious files that manifest the characteristics of an exploited Linux vmsplice() function. Step 1 For Trend Micro Customers Scanning your system wit...

Linux Arrival Details This malware arrives via the following means: Downloaded by Trojan.SH.BROOTKIT.A Other Details This Rootkit does the following: It is used by Trojan.SH.BROOTKIT.B for its rootkit capabilities. It hides pro...