Ruleset Update Summary - 2026/09/07 - v11283

Ruleset Updates
1

Summary:

0 new OPEN, 0 new PRO (0 + 0)

Modified inactive rules:

  • 2017940 - ET MALWARE Zbot Variant SSL cert for whoismama.ru (malware.rules)
  • 2017941 - ET MALWARE Zbot Variant SSL cert for dewart.ru (malware.rules)
  • 2017942 - ET MALWARE Zbot Variant SSL cert for anlogtewron.ru (malware.rules)
  • 2017943 - ET MALWARE Zbot Variant SSL cert for erjentronem.ru (malware.rules)
  • 2017957 - ET EXPLOIT_KIT GoonEK Landing Jan 10 2014 (exploit_kit.rules)
  • 2017987 - ET MALWARE Upatre SSL Compromised site appsredeeem (malware.rules)
  • 2017993 - ET MALWARE GoonEK Jan 21 2013 (malware.rules)
  • 2017995 - ET EXPLOIT_KIT GoonEK Landing Jan 21 2013 SilverLight 1 (exploit_kit.rules)
  • 2017996 - ET EXPLOIT_KIT GoonEK Landing Jan 21 2013 SilverLight 2 (exploit_kit.rules)
  • 2017997 - ET EXPLOIT_KIT GoonEK Landing Jan 21 2013 SilverLight 3 (exploit_kit.rules)
  • 2017999 - ET MOBILE_MALWARE Android/HeHe.Spy getLastVersion CnC Beacon (mobile_malware.rules)
  • 2018004 - ET MOBILE_MALWARE Android/HeHe.Spy ReportMessageRequest CnC Beacon (mobile_malware.rules)
  • 2018015 - ET MALWARE Limitless Logger Sending Data over SMTP (malware.rules)
  • 2018017 - ET MALWARE Predator Logger Sending Data over SMTP (malware.rules)
  • 2018018 - ET MALWARE Win32/Antilam.2_0 Sending Data over SMTP (malware.rules)
  • 2018019 - ET MALWARE Win32.WinSpy.pob Sending Data over SMTP (malware.rules)
  • 2018029 - ET MALWARE ehow/livestrong Malicious Flash 10/11 (malware.rules)
  • 2018031 - ET EXPLOIT Hostile _dsgweed.class JAR exploit (exploit.rules)
  • 2018033 - ET MALWARE Win32.Genome.boescz Checkin (malware.rules)
  • 2018034 - ET MALWARE W32/Banker.AALV checkin (malware.rules)
  • 2018035 - ET WEB_CLIENT StyX Landing Jan 29 2014 (web_client.rules)
  • 2018041 - ET CURRENT_EVENTS Current Asprox Spam Campaign (current_events.rules)
  • 2018050 - ET ADWARE_PUP Win32.Magania (adware_pup.rules)
  • 2018072 - ET MALWARE W32/FakeAlert.FT.gen.Eldorado Downloading DLL (malware.rules)
  • 2018073 - ET MALWARE W32/FakeAlert.FT.gen.Eldorado Downloading VBS (malware.rules)
  • 2018081 - ET MALWARE W32/Zeus.InfoStealer Infection Campaign Kia.exe Request (malware.rules)
  • 2018094 - ET MALWARE DirtJumper Activity (malware.rules)
  • 2018099 - ET ADWARE_PUP W32/Safekeeper.Adware CnC Beacon (adware_pup.rules)
  • 2018102 - ET MALWARE W32/Woai.Dropper Config Request (malware.rules)
  • 2018115 - ET MALWARE FTP File Upload - BlackPOS Naming Scheme (malware.rules)
  • 2018123 - ET MALWARE Win32/Almanahe.B Checkin (malware.rules)
  • 2018135 - ET CURRENT_EVENTS Current Asprox Spam Campaign 2 (current_events.rules)
  • 2018143 - ET MALWARE Backdoor.Win32.Popwin Checkin (malware.rules)
  • 2018148 - ET ADWARE_PUP W32/InstallMonetizer.Adware Beacon 1 (adware_pup.rules)
  • 2018149 - ET ADWARE_PUP W32/InstallMonetizer.Adware Beacon 2 (adware_pup.rules)
  • 2018162 - ET WEB_CLIENT Malicious Redirect Evernote Spam Campaign Feb 19 2014 (web_client.rules)
  • 2018163 - ET EXPLOIT_KIT GoonEK Landing Feb 19 2014 2 (exploit_kit.rules)
  • 2018177 - ET EXPLOIT_KIT OnClick Anti-BOT TDS POST Feb 25 2014 (exploit_kit.rules)
  • 2018178 - ET EXPLOIT_KIT OnClick Anti-BOT TDS Hidden Form Feb 25 2014 (exploit_kit.rules)
  • 2018182 - ET MALWARE Zeus Spam Campaign pdf.exe In ZIP - 26th Feb 2014 (malware.rules)
  • 2018184 - ET MALWARE Zeus.Downloader Campaign Second Stage Executable Request (malware.rules)
  • 2018185 - ET MALWARE W32/FakeFlash.Dropper Initial CnC Beacon (malware.rules)
  • 2018186 - ET MALWARE W32/FakeFlash.Dropper Initial CnC Beacon Acknowledgement (malware.rules)
  • 2018187 - ET MALWARE W32/FakeFlash.Dropper PutInformation CnC Beacon (malware.rules)
  • 2018188 - ET MALWARE W32/FakeFlash.Dropper GetInformation CnC Beacon Acknowledgement (malware.rules)
  • 2018196 - ET WEB_CLIENT Malicious Spam Redirection Feb 28 2014 (web_client.rules)
  • 2018200 - ET MALWARE Win32/Matsnu.L Checkin (malware.rules)
  • 2018208 - ET DOS Inbound GoldenEye DoS attack (dos.rules)
  • 2018227 - ET WEB_CLIENT Rawin Flash Landing URI Struct March 05 2014 (web_client.rules)
  • 2018235 - ET EXPLOIT CritX/SafePack/FlashPack CVE-2013-2551 (exploit.rules)
  • 2018236 - ET WEB_CLIENT CritX/SafePack/FlashPack SilverLight Secondary Landing (web_client.rules)
  • 2018237 - ET CURRENT_EVENTS CritX/SafePack/FlashPack SilverLight file as eot (current_events.rules)
  • 2018247 - ET MALWARE Snake rootkit usermode-centric client request (malware.rules)
  • 2018260 - ET EXPLOIT_KIT DRIVEBY Styx Landing Page Mar 08 2014 (exploit_kit.rules)
  • 2018263 - ET CURRENT_EVENTS Dell Kace backdoor (current_events.rules)
  • 2018264 - ET MALWARE Linux/Kimodin SSH backdoor activity (malware.rules)
  • 2018291 - ET MALWARE MultiThreat/Winspy.RAT Keep-Alive (flowbit set) (malware.rules)
  • 2018292 - ET MALWARE MultiThreat/Winspy.RAT Keep-Alive Server Response (malware.rules)
  • 2018293 - ET MALWARE MultiThreat/Winspy.RAT SMTP Data Exfiltration (malware.rules)
  • 2018294 - ET MALWARE MultiThreat/Winspy.RAT FTP File Download Command (malware.rules)
  • 2018298 - ET EXPLOIT_KIT GoonEK Landing Mar 20 2014 (exploit_kit.rules)
  • 2018300 - ET MALWARE Win32/Stoberox.B (malware.rules)
  • 2018319 - ET MALWARE Upatre SSL Compromised site trudeausociety (malware.rules)
  • 2018321 - ET MALWARE Saker UA (malware.rules)
  • 2018336 - ET MALWARE Asprox Fake Ximian Evolution X-Mailer Header (XimianEvolution1.4.6) (malware.rules)
  • 2018338 - ET ADWARE_PUP W32/DownloadAdmin.Adware CnC Beacon (adware_pup.rules)
  • 2018339 - ET ADWARE_PUP W32/DownloadAdmin.Adware Executable Download Request (adware_pup.rules)
  • 2018344 - ET CURRENT_EVENTS Hikvision DVR Synology Recon Scan Checkin (current_events.rules)
  • 2018350 - ET MALWARE Upatre SSL Compromised site potpourriflowers (malware.rules)
  • 2018351 - ET MALWARE Upatre SSL Compromised site kionic (malware.rules)
  • 2018353 - ET CURRENT_EVENTS Win32.RBrute Scan (Outgoing) (current_events.rules)
  • 2018354 - ET CURRENT_EVENTS Win32.RBrute Scan (incoming) (current_events.rules)
  • 2018355 - ET CURRENT_EVENTS Win32.RBrute http server request (current_events.rules)
  • 2018356 - ET CURRENT_EVENTS Win32.RBrute http response (current_events.rules)
  • 2018357 - ET EXPLOIT_KIT EvilTDS Redirection (exploit_kit.rules)
  • 2018385 - ET MALWARE Zeus.Downloader Campaign Second Stage Executable Request 10/4/2014 (malware.rules)
  • 2018386 - ET MALWARE cryptodefense Checkin (malware.rules)
  • 2018394 - ET MALWARE Common Upatre Header Structure (malware.rules)
  • 2018399 - ET MALWARE BitCrypt site accessed via .onion SSL Proxy (malware.rules)
  • 2018400 - ET MALWARE BitCrypt Ransomware Domain (malware.rules)
  • 2018408 - ET EXPLOIT Fiesta PDF Exploit Download (exploit.rules)
  • 2018410 - ET EXPLOIT Fiesta Flash Exploit Download (exploit.rules)
  • 2018417 - ET MALWARE ftpchk3.php possible upload success (malware.rules)
  • 2018422 - ET MALWARE Upatre Binary Download April 28 2014 (malware.rules)
  • 2018439 - ET EXPLOIT Common Bad Actor Indicators Used in Various Targeted 0-day Attacks (exploit.rules)
  • 2018452 - ET MALWARE CryptoWall Check-in (malware.rules)
  • 2018458 - ET ADWARE_PUP DomainIQ Check-in (adware_pup.rules)
  • 2018462 - ET MALWARE W32/Fsysna.Downloader CnC Beacon (malware.rules)
  • 2018463 - ET MALWARE possible OneLouder header structure (malware.rules)
  • 2018464 - ET MALWARE OneLouder EXE download possibly installing Zeus P2P (malware.rules)
  • 2018469 - ET EXPLOIT_KIT DRIVEBY FlashPack 2013-2551 May 13 2014 (exploit_kit.rules)
  • 2018470 - ET EXPLOIT_KIT DRIVEBY FlashPack Flash Exploit flash2013.php (exploit_kit.rules)
  • 2018471 - ET EXPLOIT_KIT DRIVEBY FlashPack Flash Exploit flash2014.php (exploit_kit.rules)
  • 2018477 - ET MALWARE Downloader.Win32.Tesch.A Server CnC Checkin Reply (malware.rules)
  • 2018479 - ET MALWARE Downloader.Win32.Tesch.A Server CnC Sending Executable (malware.rules)
  • 2018493 - ET WEB_CLIENT Sweet Orange WxH redirection (web_client.rules)
  • 2018506 - ET MALWARE Upatre Compromised Site hot-buys (malware.rules)
  • 2018533 - ET MOBILE_MALWARE Android.Adware.Wapsx.A (mobile_malware.rules)
  • 2018539 - ET MALWARE TorExplorer Certificate - Potentially Linked To W32/Cryptowall.Ransomware (malware.rules)
  • 2018540 - ET EXPLOIT_KIT DRIVEBY FlashPack Flash Exploit flash0515.php (exploit_kit.rules)
  • 2018548 - ET MALWARE EtumBot Command Status Message (malware.rules)
  • 2018549 - ET MALWARE EtumBot PUT File Response (malware.rules)
  • 2018550 - ET MALWARE EtumBot GET File Initial Response (malware.rules)
  • 2018551 - ET MALWARE EtumBot GET File Data Upload (malware.rules)
  • 2018562 - ET EXPLOIT_KIT BleedingLife Exploit Kit Landing Page Requested (exploit_kit.rules)
  • 2018563 - ET EXPLOIT_KIT BleedingLife Exploit Kit SWF Exploit Request (exploit_kit.rules)
  • 2018564 - ET EXPLOIT_KIT BleedingLife Exploit Kit JAR Exploit Request (exploit_kit.rules)
  • 2018579 - ET MALWARE Dyreza RAT Checkin (malware.rules)
  • 2018591 - ET WEB_CLIENT Trojan-Banker.JS.Banker fraudulent redirect boleto payment code (web_client.rules)
  • 2018592 - ET EXPLOIT_KIT Multiple EKs CVE-2013-3918 (exploit_kit.rules)
  • 2018616 - ET MALWARE Win32/Sharik C2 Incoming Crafted Request (malware.rules)
  • 2018622 - ET MALWARE Downloader.Win32.Tesch.A Bot Command (OK acknowledgement) (malware.rules)
  • 2018623 - ET MALWARE Downloader.Win32.Tesch.A Bot Command (Proxy command) (malware.rules)
  • 2018624 - ET MALWARE Downloader.Win32.Tesch.A Server Command (Confirm C2 IP and port) (malware.rules)
  • 2018625 - ET MALWARE Downloader.Win32.Tesch.A Server Command (Confirm C2 IP and port) 2 (malware.rules)
  • 2018626 - ET MALWARE Downloader.Win32.Tesch.A Server Command (bot is ready to start receiving commands) (malware.rules)
  • 2018635 - ET MALWARE Common Upatre Header Structure 2 (malware.rules)
  • 2018641 - ET MALWARE BANKER.WIN32.BANBRA.BEEC Checkin (malware.rules)
  • 2018645 - ET MALWARE TrojanSpy.Win32/Banker.AMB SQL Checkin (malware.rules)
  • 2018675 - ET MALWARE Linux DDoS bot Antiq IRC (malware.rules)
  • 2018683 - ET MALWARE Dyreza RAT Checkin 2 (malware.rules)
  • 2018685 - ET MALWARE Win32/Aibatook checkin (malware.rules)
  • 2018687 - ET MALWARE Win32/Aibatook checkin 2 (malware.rules)
  • 2018688 - ET MALWARE Predator Pain Sending Data over SMTP (malware.rules)
  • 2018737 - ET EXPLOIT_KIT Fake CDN Sweet Orange Gate July 17 2014 (exploit_kit.rules)
  • 2018738 - ET MALWARE Pain File Stealer sending wallet.dat via SMTP (malware.rules)
  • 2018739 - ET MALWARE Kuluoz / Asprox checkin (malware.rules)
  • 2018749 - ET MALWARE Dyreza RAT Checkin 3 (malware.rules)
  • 2018769 - ET MOBILE_MALWARE Android ScarePakage checkin (mobile_malware.rules)
  • 2018774 - ET MOBILE_MALWARE Android ScarePakage checkin 2 (mobile_malware.rules)
  • 2018781 - ET MOBILE_MALWARE AndroidOS.Simplocker Checkin (mobile_malware.rules)
  • 2018793 - ET MALWARE EUPUDS.A Requests for Boleto replacement (malware.rules)
  • 2018798 - ET MALWARE Infostealer.KLPROXY Checkin via SMTP (malware.rules)
  • 2018872 - ET MALWARE Tor based locker .onion Proxy domain in SNI July 31 2014 (malware.rules)
  • 2018873 - ET MALWARE Tor based locker Ransom Page (malware.rules)
  • 2018877 - ET MALWARE Tor based locker knowledgewiki.info in SNI July 31 2014 (malware.rules)
  • 2018884 - ET MALWARE Troj/ReRol.A Checkin 4 (malware.rules)
  • 2018888 - ET MOBILE_MALWARE Android/Spy.Kasandra.A Checkin (mobile_malware.rules)
  • 2018892 - ET MALWARE Zbot .onion Proxy domain in SNI Aug 04 2014 (malware.rules)
  • 2018901 - ET MALWARE BITTERBUG Checkin 2 (malware.rules)
  • 2018909 - ET EXPLOIT_KIT Malvertising Redirection to Exploit Kit Aug 07 2014 (exploit_kit.rules)
  • 2018920 - ET EXPLOIT_KIT DRIVEBY Malicious Plugin Detect URI struct (exploit_kit.rules)
  • 2018930 - ET EXPLOIT_KIT DRIVEBY Archie.EK PluginDetect URI Struct (exploit_kit.rules)
  • 2018931 - ET EXPLOIT_KIT DRIVEBY Archie.EK CVE-2013-2551 URI Struct (exploit_kit.rules)
  • 2018933 - ET EXPLOIT_KIT DRIVEBY Archie.EK Landing (exploit_kit.rules)
  • 2018941 - ET MALWARE ClickFraud Trojan Socks5 Init Response (malware.rules)
  • 2018949 - ET MALWARE Win32/PSW.Steam.NBP Checkin (malware.rules)
  • 2018951 - ET MALWARE Tor Based Locker Page (Torrentlocker) (malware.rules)
  • 2018962 - ET MALWARE ZeroLocker Activity (malware.rules)
  • 2018994 - ET MALWARE Win32/Xema dropping file (malware.rules)
  • 2019008 - ET CURRENT_EVENTS Safe/CritX/FlashPack Java Payload (current_events.rules)
  • 2019093 - ET CURRENT_EVENTS ScanBox Framework used in WateringHole Attacks (current_events.rules)
  • 2019095 - ET CURRENT_EVENTS ScanBox Framework used in WateringHole Attacks (POST) PluginData (current_events.rules)
  • 2019096 - ET CURRENT_EVENTS ScanBox Framework used in WateringHole Attacks KeepAlive (current_events.rules)
  • 2019125 - ET MOBILE_MALWARE Android/Youmi.Adware Install Report CnC Beacon (mobile_malware.rules)
  • 2019134 - ET WEB_CLIENT Flashpack Redirect Method 2 (web_client.rules)
  • 2019146 - ET EXPLOIT_KIT Sweet Orange CDN Gate Sept 09 2014 Method 2 (exploit_kit.rules)
  • 2019156 - ET ADWARE_PUP W32/Kyle Malvertising.Dropper CnC Beacon (adware_pup.rules)
  • 2019160 - ET MALWARE DecebalPOS Checkin (malware.rules)
  • 2019174 - ET MOBILE_MALWARE iOS/AppBuyer Checkin 1 (mobile_malware.rules)
  • 2019175 - ET MOBILE_MALWARE iOS/AppBuyer Checkin 2 (mobile_malware.rules)
  • 2019179 - ET MALWARE MSIL/Spy.RapidStealer.B Checkin (malware.rules)
  • 2019190 - ET MALWARE Infostealer.Banprox Proxy.pac Download 2 (malware.rules)
  • 2019201 - ET MALWARE Backdoor.Win32/PcClient.AA Checkin (malware.rules)
  • 2019235 - ET MALWARE Pushdo v3 Checkin (malware.rules)
  • 2019242 - ET MALWARE Linux/DDoS.M distributed via CVE-2014-6271 Checkin (malware.rules)
  • 2019243 - ET MALWARE Infostealer.Boleteiro checking stolen boleto payment information (malware.rules)
  • 2019295 - ET MALWARE Linux/ShellshockCampaign.DDOSBot Get Bot IP CnC Server Message (malware.rules)
  • 2019296 - ET MALWARE Linux/ShellshockCampaign.DDOSBot Ping CnC Server Message (malware.rules)
  • 2019297 - ET MALWARE Linux/ShellshockCampaign.DDOSBot Scanner CnC Server Message (malware.rules)
  • 2019299 - ET MALWARE Linux/ShellshockCampaign.DDOSBot Random Byte Flood CnC Server Message (malware.rules)
  • 2019301 - ET MALWARE Linux/ShellshockCampaign.DDOSBot TCP Flood CnC Server Message (malware.rules)
  • 2019302 - ET MALWARE Linux/ShellshockCampaign.DDOSBot HOLD TCP Flood CnC Server Message (malware.rules)
  • 2019303 - ET MALWARE Linux/ShellshockCampaign.DDOSBot Kill Attack CnC Server Message (malware.rules)
  • 2019311 - ET WEB_CLIENT Upatre redirector GET Sept 29 2014 (web_client.rules)
  • 2019321 - ET WEB_CLIENT Upatre redirector 29 Sept 2014 - POST (web_client.rules)
  • 2019343 - ET CURRENT_EVENTS FAKEIE 11.0 Minimal Headers (flowbit set) (current_events.rules)
  • 2019344 - ET MALWARE FAKEIE Minimal Headers (flowbit set) (malware.rules)
  • 2019353 - ET MALWARE Cryptolocker Checkin (malware.rules)
  • 2019355 - ET MALWARE W32/SpyClicker.ClickFraud CnC Beacon (malware.rules)
  • 2019357 - ET MALWARE SpyClicker.ClickFraud Query Instructions CnC Response (malware.rules)
  • 2019404 - ET DOS Potential Tsunami SYN Flood Denial Of Service Attempt (dos.rules)
  • 2019417 - ET CURRENT_EVENTS excessive fatal alerts (possible POODLE attack against client) (current_events.rules)
  • 2019456 - ET CURRENT_EVENTS FlashPack Payload URI Struct Oct 16 2014 (current_events.rules)
  • 2019461 - ET CURRENT_EVENTS BlackEnergy URI Struct Oct 17 2014 BE1 (current_events.rules)
  • 2019462 - ET CURRENT_EVENTS BlackEnergy URI Struct Oct 17 2014 BE2 (current_events.rules)
  • 2019463 - ET CURRENT_EVENTS BlackEnergy URI Struct Oct 17 2014 BE3 (current_events.rules)
  • 2019464 - ET CURRENT_EVENTS BlackEnergy URI Struct Oct 17 2014 BE4 (current_events.rules)
  • 2019465 - ET CURRENT_EVENTS BlackEnergy URI Struct Oct 17 2014 BE5 (current_events.rules)
  • 2019487 - ET CURRENT_EVENTS FlashPack Payload URI Struct Oct 22 2014 (current_events.rules)
  • 2019500 - ET MALWARE Vawtrak/NeverQuest Posting Data (malware.rules)
  • 2019501 - ET MALWARE Vawtrak/NeverQuest Posting Data (malware.rules)
  • 2019538 - ET MALWARE Ransom.Win32.Blocker.fwlm Checkin (malware.rules)
  • 2019595 - ET MALWARE FlashPack Payload Download Oct 29 (malware.rules)
  • 2019596 - ET WEB_CLIENT FlashPack Secondary Landing Oct 29 (web_client.rules)
  • 2019597 - ET WEB_CLIENT DRIVEBY FakeSupport - Landing Page - Windows Firewall Warning (web_client.rules)
  • 2019599 - ET WEB_CLIENT DRIVEBY FakeSupport - Landing Page - Operating System Check (web_client.rules)
  • 2019607 - ET MALWARE CryptoBot Downloading Files (malware.rules)
  • 2019611 - ET EXPLOIT Fiesta Java Exploit/Payload URI Struct (exploit.rules)
  • 2019623 - ET EXPLOIT Fiesta SilverLight 4.x Exploit URI Struct (exploit.rules)
  • 2019626 - ET MALWARE Cohhoc RAT CnC Response (malware.rules)
  • 2019636 - ET MALWARE Backoff Variant Checkin (malware.rules)
  • 2019637 - ET MALWARE Shellshock Backdoor.Perl.Shellbot.F C2 (malware.rules)
  • 2019644 - ET MALWARE Shellshock Backdoor.Perl.Shellbot.F retrieval (malware.rules)
  • 2019661 - ET MALWARE OSX/WireLurker Checkin (malware.rules)
  • 2019664 - ET MALWARE iOS/WireLurker CnC Beacon (malware.rules)
  • 2019688 - ET MALWARE Win32/Roficor.A (Darkhotel) Checkin 2 (malware.rules)
  • 2019710 - ET MALWARE VBS/Autorun.J Checkin (malware.rules)
  • 2019711 - ET MALWARE W32Autorun.worm.aaeh Checkin (malware.rules)
  • 2019712 - ET MALWARE W32/Keylogger.CI Checkin (malware.rules)
  • 2019717 - ET MALWARE Alureon Checkin (malware.rules)
  • 2019728 - ET WEB_SPECIFIC_APPS Wordpress Slideshow Gallery 1.4.6 - Shell Upload (web_specific_apps.rules)
  • 2019741 - ET MALWARE W32/Matsnu.Backdoor CnC Beacon (malware.rules)
  • 2019757 - ET MALWARE Bamital Checkin Response 1 (malware.rules)
  • 2019759 - ET MALWARE Win32/Zemot Requesting PE (malware.rules)
  • 2019766 - ET EXPLOIT FlashPack Flash Exploit Nov 20 2014 (exploit.rules)
  • 2019776 - ET MALWARE CoinVault POST M1 (malware.rules)
  • 2019789 - ET MALWARE HTTP Request to a *.cvredirect.no-ip.net domain - CoinLocker Domain (malware.rules)
  • 2019791 - ET MALWARE HTTP Request to a *.cvredirect.ddns.net domain - CoinLocker Domain (malware.rules)
  • 2019799 - ET EXPLOIT Magnitude Flash Exploit (IE) (exploit.rules)
  • 2019800 - ET CURRENT_EVENTS Magnitude Flash Payload (current_events.rules)
  • 2019828 - ET MALWARE Trojan/W32.KRBanker.60928.C Checkin (malware.rules)
  • 2019843 - ET MALWARE Vawtrak/NeverQuest Posting Data (malware.rules)
  • 2019848 - ET MALWARE Sony Breach Wiper Callout (malware.rules)
  • 2019877 - ET MALWARE MS Office Macro Dridex Download URI Dec 5 2014 (malware.rules)
  • 2019881 - ET MALWARE Chthonic Check-in (malware.rules)
  • 2019894 - ET EXPLOIT_KIT Probable malicious download from e-mail link /1.php (exploit_kit.rules)
  • 2019909 - ET MALWARE Win32/Critroni Tor DNS Proxy lookup (malware.rules)
  • 2019915 - ET MALWARE Cloud Atlas Request to WebDAV CloudMe (malware.rules)
  • 2019916 - ET WEB_CLIENT HanJuan Landing Dec 10 2014 (web_client.rules)
  • 2019927 - ET MALWARE Beastdoor Keylogger Report via SMTP (malware.rules)
  • 2019939 - ET CURRENT_EVENTS SoakSoak Malware GET request (current_events.rules)
  • 2019940 - ET CURRENT_EVENTS DNS Query SoakSoak Malware (soaksoak .ru) (current_events.rules)
  • 2019941 - ET MALWARE Win32.Bumrat.B Checkin (malware.rules)
  • 2019942 - ET MALWARE W32/TinyZBot Checkin (Operation Cleaver) (malware.rules)
  • 2019953 - ET WEB_CLIENT Upatre Redirector Dec 16 2014 set (web_client.rules)
  • 2019954 - ET WEB_CLIENT Upatre Redirector Dec 16 2014 (web_client.rules)
  • 2019958 - ET MOBILE_MALWARE CoolReaper CnC Beacon 1 (mobile_malware.rules)
  • 2019970 - ET WEB_CLIENT Upatre Download Redirection Dec 18 2014 (web_client.rules)
  • 2019975 - ET MALWARE Syrian.Slideshow Sending Information via SMTP (malware.rules)
  • 2019977 - ET MALWARE W32/Dridex Distribution Campaign Dec 19 2014 (malware.rules)
  • 2019978 - ET MALWARE Cryptolocker Ransom Page (malware.rules)
  • 2020009 - ET MALWARE US-CERT TA14-353A Lightweight Backdoor 3 (malware.rules)
  • 2020013 - ET MALWARE US-CERT TA14-353A Lightweight Backdoor 7 (malware.rules)
  • 2020020 - ET MALWARE US-CERT TA14-353A WIPER4 (malware.rules)
  • 2020023 - ET MALWARE US-CERT TA14-353A Network Propagation Wiper (malware.rules)
  • 2020025 - ET MALWARE Win32/Spy.Agent.OHT - AnunakAPT TCP Checkin 2 (malware.rules)
  • 2020028 - ET MALWARE Win32/Spy.Agent.OHT - AnunakAPT HTTP Checkin Response 1 (malware.rules)
  • 2020030 - ET MALWARE Win32/Spy.Agent.OHT - AnunakAPT HTTP Checkin Response 2 (malware.rules)
  • 2807421 - ETPRO MALWARE Trojan.Win32.Agent.aev Checkin (malware.rules)
  • 2807423 - ETPRO MALWARE Trojan.Win32.Agent.adhbh Checkin via SMTP Port 80 (malware.rules)
  • 2807424 - ETPRO MALWARE Trojan-Dropper.Win32.Dorifel.hlu Checkin (malware.rules)
  • 2807426 - ETPRO MALWARE Trojan.Win32.Badur.gboh Download (malware.rules)
  • 2807433 - ETPRO MALWARE Win32/Agent.QCD Checkin 3 (malware.rules)
  • 2807434 - ETPRO MALWARE Trojan.Win32.Agent.adecj Checkin (malware.rules)
  • 2807451 - ETPRO MALWARE Trojan-Clicker.Win32.Agent.aaut Checkin (malware.rules)
  • 2807452 - ETPRO MALWARE Trojan-Clicker.Win32.Agent.aaut Checkin 2 (malware.rules)
  • 2807455 - ETPRO MALWARE Win32/PSW.Delf.OIL Checkin (malware.rules)
  • 2807462 - ETPRO MALWARE Net-Worm.Win32.Koobface.ght Ping (malware.rules)
  • 2807467 - ETPRO MALWARE TrojanDownloader.Win32/Unruy.C checkin - SET 2 (malware.rules)
  • 2807468 - ETPRO MALWARE TrojanDownloader Win32/Unruy.C Checkin 3 (malware.rules)
  • 2807474 - ETPRO MALWARE Miniduke Checkin 2 (malware.rules)
  • 2807476 - ETPRO MALWARE Win32/TrojanDownloader.Onkods.V Download (malware.rules)
  • 2807477 - ETPRO MALWARE Trojan-Downloader.Win32.Agent.bofr Checkin (malware.rules)
  • 2807482 - ETPRO MALWARE Win32/Startpage.JT Checkin (malware.rules)
  • 2807484 - ETPRO MALWARE SHeur4.BHUE Checkin (malware.rules)
  • 2807490 - ETPRO MALWARE Trojan-Dropper.Win32.Sysn.aajj Checkin (malware.rules)
  • 2807494 - ETPRO MALWARE Trojan-Dropper.Win32.Sysn.aajj Checkin 2 (malware.rules)
  • 2807496 - ETPRO MALWARE Trojan/Win32.Zbot Covert Channel port 53 - SET (malware.rules)
  • 2807500 - ETPRO MALWARE Trojan-Downloader.Win32.Agent.aah Checkin (malware.rules)
  • 2807501 - ETPRO MALWARE Win32/Spy.Banker.ZSX Download (malware.rules)
  • 2807507 - ETPRO MALWARE Win32.Foreign.jowy 2 (malware.rules)
  • 2807526 - ETPRO MALWARE Win32/Delf.OMB Checkin (malware.rules)
  • 2807532 - ETPRO MALWARE W32/Banker.YNL!tr.spy sending info about infection via SMTP (malware.rules)
  • 2807539 - ETPRO MALWARE Trojan.Win32.VB.bzqf Checkin (malware.rules)
  • 2807541 - ETPRO MALWARE Trojan.Win32.Kargatroj.a Checkin (malware.rules)
  • 2807545 - ETPRO MALWARE Backdoor.Win32.Cmjspy.aw Checkin (malware.rules)
  • 2807548 - ETPRO MALWARE Win32.VJadtre.2 Checkin (malware.rules)
  • 2807571 - ETPRO MALWARE W32/Agent.EW.gen Checkin (malware.rules)
  • 2807579 - ETPRO MALWARE Backdoor/Win32.Hupigon Checkin (malware.rules)
  • 2807586 - ETPRO MALWARE Win32.Magania Response (malware.rules)
  • 2807587 - ETPRO MALWARE Win32/Redosdru.C CnC (OUTBOUND) (malware.rules)
  • 2807588 - ETPRO MALWARE Trojan.Win32.Staser.unn CnC (OUTBOUND) (malware.rules)
  • 2807600 - ETPRO MALWARE Trojan.Win32.IRCbot.bam IRC Checkin (malware.rules)
  • 2807611 - ETPRO MALWARE Trojan.Win32.Staser.ury CnC (OUTBOUND) (malware.rules)
  • 2807612 - ETPRO MALWARE Backdoor Lanfiltrator Checkin 2 (malware.rules)
  • 2807618 - ETPRO MALWARE Win32/TrojanDownloader.Banload.ROP Response (malware.rules)
  • 2807638 - ETPRO MALWARE Win32.Androm.atfw (malware.rules)
  • 2807666 - ETPRO MALWARE Virus.Win32.Virut.ce Checkin 5 (malware.rules)
  • 2807685 - ETPRO MALWARE Win32/Meredrop CnC (OUTBOUND) (malware.rules)
  • 2807695 - ETPRO MALWARE Win32/Tocoomu.A Checkin (malware.rules)
  • 2807708 - ETPRO MALWARE Win32/Idicaf.C Checkin (malware.rules)
  • 2807712 - ETPRO MALWARE Win32/Rovnix.J Checkin (malware.rules)
  • 2807716 - ETPRO MOBILE_MALWARE AndroidOS/Sumzand.A Checkin (mobile_malware.rules)
  • 2807717 - ETPRO WEB_CLIENT Adobe Reader Double Free CVE-2014-0493 1 (web_client.rules)
  • 2807719 - ETPRO MALWARE PSW.Win32.Agent.afag Checkin (malware.rules)
  • 2807741 - ETPRO MOBILE_MALWARE Backdoor.AndroidOS.Fakengry.b Checkin 2 (mobile_malware.rules)
  • 2807753 - ETPRO MALWARE Trojan.Win32.Agentb.aoii Checkin (malware.rules)
  • 2807763 - ETPRO MALWARE Win32/Hider.G GET .ini Request (malware.rules)
  • 2807785 - ETPRO MALWARE IM-Worm.Win32.Steckt.dp Checkin (malware.rules)
  • 2807793 - ETPRO MALWARE Win32/Rootkit.BlackEnergy.AG Checkin (malware.rules)
  • 2807796 - ETPRO MALWARE Win32/Quervar.C DNS query to Domain kaspersky.localnet (malware.rules)
  • 2807797 - ETPRO MALWARE Trojan-Dropper.Win32.Dorifel.ahba Checkin (malware.rules)
  • 2807817 - ETPRO MALWARE Trojan-Downloader.Win32.Agent.ybmu Checkin (malware.rules)
  • 2807826 - ETPRO MALWARE Win32/Parite.B Checkin 1 (malware.rules)
  • 2807837 - ETPRO MALWARE Trojan-Spy.Win32.Polyatroj.pej Checkin via Gadu-Gadu (malware.rules)
  • 2807841 - ETPRO MALWARE Trojan-Spy.Win32.KeyLogger.tr via Gadu-Gadu (malware.rules)
  • 2807859 - ETPRO MALWARE Variant.Symmi Checkin 3 (malware.rules)
  • 2807869 - ETPRO MALWARE Win32/Necurs Checkin 2 (malware.rules)
  • 2807878 - ETPRO MALWARE Trojan-Dropper.Win32.Dapato.dfmz Checkin (malware.rules)
  • 2807886 - ETPRO MALWARE TROJ_PANDDOS.DZ Checkin (Intel) (malware.rules)
  • 2807887 - ETPRO MALWARE TROJ_PANDDOS.DZ Checkin (AMD) (malware.rules)
  • 2807892 - ETPRO MALWARE Trojan.Win32.IRCbot.ye Checkin (malware.rules)
  • 2807893 - ETPRO MALWARE Trojan-Dropper.Win32.Danseed.b Checkin (malware.rules)
  • 2807900 - ETPRO MALWARE TrojanProxy.Wintu.B Checkin (malware.rules)
  • 2807901 - ETPRO MALWARE RemoteAdmin.Win32.RAdmin Request (malware.rules)
  • 2807905 - ETPRO MALWARE Trojan.Win32.Ircbot IRC LOGIN (malware.rules)
  • 2807918 - ETPRO MALWARE Trojan-Ransom.Win32.Blocker.avsx Checkin Response (malware.rules)
  • 2807955 - ETPRO MALWARE Win32/Injector.Autoit.ZZ (malware.rules)
  • 2807967 - ETPRO MALWARE Backdoor.Win32.Destrukor.20 Checkin (malware.rules)
  • 2807975 - ETPRO MALWARE Trojan.DownLoader9.54232 Checkin (malware.rules)
  • 2807982 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.Agent.gj Checkin (mobile_malware.rules)
  • 2807984 - ETPRO MALWARE Trojan.Win32.Iframer.a Checkin (malware.rules)
  • 2808007 - ETPRO MOBILE_MALWARE Android/DroidRooter.B Checkin (mobile_malware.rules)
  • 2808010 - ETPRO ADWARE_PUP Win32.Boaxxe.BL windowsupdate connectivity check (adware_pup.rules)
  • 2808014 - ETPRO MOBILE_MALWARE Trojan-Spy.AndroidOS.SmForw.o Checkin 4 (mobile_malware.rules)
  • 2808018 - ETPRO MALWARE Win32.LockScreen.BHI checkin (malware.rules)
  • 2808020 - ETPRO MALWARE Agent-AEMM Checkin Response (malware.rules)
  • 2808032 - ETPRO MALWARE Win32/Zbot.BX Checkin (malware.rules)
  • 2808052 - ETPRO MOBILE_MALWARE Android.Riskware.SmsPay.C Checkin (mobile_malware.rules)
  • 2808054 - ETPRO MALWARE MSIL/RapidStealer.A FTP Activity 1 (set) (malware.rules)
  • 2808055 - ETPRO MALWARE MSIL/RapidStealer.A FTP Activity 1 (malware.rules)
  • 2808056 - ETPRO MALWARE MSIL/RapidStealer.A FTP Activity 2 (set) (malware.rules)
  • 2808057 - ETPRO MALWARE MSIL/RapidStealer.A FTP Activity 2 (malware.rules)
  • 2808060 - ETPRO MOBILE_MALWARE RiskTool.AndroidOS.SMSreg.de Checkin 4 (mobile_malware.rules)
  • 2808064 - ETPRO MOBILE_MALWARE RiskTool.AndroidOS.SMSreg.du Checkin (mobile_malware.rules)
  • 2808074 - ETPRO ADWARE_PUP AdWare.Win32.MMag.d Checkin (adware_pup.rules)
  • 2808089 - ETPRO MOBILE_MALWARE Backdoor.AndroidOS.Cynos.b Checkin 3 (mobile_malware.rules)
  • 2808099 - ETPRO MALWARE qq.com C2 - SET (malware.rules)
  • 2808100 - ETPRO MALWARE qq.com C2 response (malware.rules)
  • 2808116 - ETPRO MALWARE Win32/Jukbot.B Checkin 13 (malware.rules)
  • 2808136 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.Agent.kh Response (mobile_malware.rules)
  • 2808155 - ETPRO WEB_SERVER Microsoft Lync Server XSS attempt (CVE-2014-1823) (web_server.rules)
  • 2808175 - ETPRO MALWARE Backdoor.DarkMoon C2 Activity (malware.rules)
  • 2808178 - ETPRO MOBILE_MALWARE Android.Monitor.Spyera.A Checkin (mobile_malware.rules)
  • 2808184 - ETPRO MALWARE Win32/Agent.QJH Checkin (malware.rules)
  • 2808220 - ETPRO MALWARE W32/Redyms.AF Checkin 2 (malware.rules)
  • 2808249 - ETPRO MALWARE Win32/Gablrub Checkin (malware.rules)
  • 2808252 - ETPRO MALWARE W32.Injector.13824.C config update pull (malware.rules)
  • 2808265 - ETPRO MALWARE Trojan.Win32.FrauDrop.dbnyoz Checkin 2 (malware.rules)
  • 2808281 - ETPRO MALWARE Password Stealer MSIL/Petun.A Sending Info (malware.rules)
  • 2808284 - ETPRO MALWARE Win32/Malex.gen!E Email Report (malware.rules)
  • 2808285 - ETPRO MALWARE Win32.Tooka.a Checkin (malware.rules)
  • 2808286 - ETPRO MALWARE Passwrd Stealer Win32/Zediv.A Checkin (malware.rules)
  • 2808293 - ETPRO MOBILE_MALWARE Android/RedMobile.B Checkin (mobile_malware.rules)
  • 2808295 - ETPRO MALWARE Win32/Hostil.B Infection Report Mail (malware.rules)
  • 2808306 - ETPRO MALWARE Virus.Win32.Virut.ce Checkin 7 (malware.rules)
  • 2808308 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.Elpso.a Checkin (mobile_malware.rules)
  • 2808313 - ETPRO MALWARE Win32.Tavex.A Checkin 2 (malware.rules)
  • 2808316 - ETPRO MALWARE XShell RAT (malware.rules)
  • 2808318 - ETPRO MALWARE Trojan.MSIL.RapidStealer.A Checkin (malware.rules)
  • 2808320 - ETPRO MALWARE Win32/Expone.A Uploading information FTP (malware.rules)
  • 2808321 - ETPRO MALWARE Backdoor.Win32.Androm Download 1 (malware.rules)
  • 2808322 - ETPRO MALWARE Backdoor.Win32.Androm Download 2 (malware.rules)
  • 2808326 - ETPRO MALWARE Trojan.Win32.Scar.hypv Checkin (malware.rules)
  • 2808330 - ETPRO MALWARE Win32/SpamTool.Tedroo.BC Self-Signed Cert Serial Number (malware.rules)
  • 2808333 - ETPRO ADWARE_PUP W32/OnlineGames.HI.gen!Eldorado Checkin (adware_pup.rules)
  • 2808336 - ETPRO MALWARE Win32/Isnev Download (malware.rules)
  • 2808346 - ETPRO MALWARE CT RAT (malware.rules)
  • 2808347 - ETPRO MALWARE Trojan.Perl.Shellbot.BD Bot Nick in IRC (malware.rules)
  • 2808348 - ETPRO MOBILE_MALWARE Android.Trojan.Voxv.A Checkin (mobile_malware.rules)
  • 2808350 - ETPRO MOBILE_MALWARE Android.Trojan.Voxv.A Checkin 3 (mobile_malware.rules)
  • 2808353 - ETPRO MOBILE_MALWARE Android.Trojan.FakeBank.I Checkin (mobile_malware.rules)
  • 2808357 - ETPRO MOBILE_MALWARE Android/TelMan.A Checkin (mobile_malware.rules)
  • 2808359 - ETPRO ADWARE_PUP Facemoi Adware Installer Download (adware_pup.rules)
  • 2808374 - ETPRO MOBILE_MALWARE Android.Trojan.InfoStealer.CM Checkin (mobile_malware.rules)
  • 2808376 - ETPRO MOBILE_MALWARE Android.Trojan.SMSSend.RZ Checkin 2 (mobile_malware.rules)
  • 2808377 - ETPRO MOBILE_MALWARE Android.Trojan.SMSSend.IA Checkin (mobile_malware.rules)
  • 2808385 - ETPRO MALWARE Win32.Xema Checkin (malware.rules)
  • 2808393 - ETPRO MOBILE_MALWARE Android/Fakeinst.HX Checkin (mobile_malware.rules)
  • 2808403 - ETPRO MALWARE Win32/PowerLoader.B Checkin response (malware.rules)
  • 2808407 - ETPRO MOBILE_MALWARE Android.Trojan.FakeInst.BX Checkin 2 (mobile_malware.rules)
  • 2808409 - ETPRO MOBILE_MALWARE Android.Riskware.SmsPay.D Checkin (mobile_malware.rules)
  • 2808417 - ETPRO MOBILE_MALWARE Android.Trojan.BaseBridge.A Checkin (mobile_malware.rules)
  • 2808436 - ETPRO MOBILE_MALWARE Backdoor.AndroidOS.Agent.aj Checkin (mobile_malware.rules)
  • 2808440 - ETPRO ADWARE_PUP AdWare.Filcout Install (adware_pup.rules)
  • 2808459 - ETPRO EXPLOIT Omeka 2.2 CSRF Add Persistent XSS (exploit.rules)
  • 2808460 - ETPRO EXPLOIT Omeka 2.2 CSRF Disable Fie Validation (exploit.rules)
  • 2808466 - ETPRO MOBILE_MALWARE AndroidOS/FakePlayer.A Checkin (mobile_malware.rules)
  • 2808479 - ETPRO MALWARE Trojan.Win32.Autoit.dbiolu Checkin (malware.rules)
  • 2808485 - ETPRO ADWARE_PUP Win32/AdWare.ICLoader.A Checkin (adware_pup.rules)
  • 2808487 - ETPRO MOBILE_MALWARE Worm.AndroidOS.Samsapo Checkin (mobile_malware.rules)
  • 2808494 - ETPRO MOBILE_MALWARE Android.Gumen.A Checkin (mobile_malware.rules)
  • 2808497 - ETPRO MALWARE Backdoor.Korgapam CnC (INBOUND) 1 (malware.rules)
  • 2808498 - ETPRO MALWARE Backdoor.Korgapam CnC (INBOUND) 2 (malware.rules)
  • 2808504 - ETPRO MALWARE Bublik.sda pastebin Request (malware.rules)
  • 2808513 - ETPRO MOBILE_MALWARE Android/SmsSpy.AS Checkin 2 (mobile_malware.rules)
  • 2808521 - ETPRO MOBILE_MALWARE Trojan-Ransom.AndroidOS.Aples.a Checkin (mobile_malware.rules)
  • 2808523 - ETPRO MOBILE_MALWARE Backdoor.AndroidOS.Ssucl.a Checkin (mobile_malware.rules)
  • 2808524 - ETPRO MOBILE_MALWARE Android.Trojan.Gfs.A Checkin (mobile_malware.rules)
  • 2808530 - ETPRO MOBILE_MALWARE Backdoor.AndroidOS.Univert.a Checkin (mobile_malware.rules)
  • 2808531 - ETPRO MALWARE Trojan-Downloader.Autoit.gen Checkin 2 (malware.rules)
  • 2808535 - ETPRO MALWARE Win32.Symmi.dagurw Checkin (malware.rules)
  • 2808553 - ETPRO MOBILE_MALWARE Android.Monitor.SMSUploader.A Checkin (mobile_malware.rules)
  • 2808556 - ETPRO MOBILE_MALWARE Trojan-Ransom.AndroidOS.Cokri.a Checkin (mobile_malware.rules)
  • 2808557 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.Waller.a Checkin (mobile_malware.rules)
  • 2808559 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.Funtasy.a Checkin (mobile_malware.rules)
  • 2808561 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.Stealer.a Checkin 2 (mobile_malware.rules)
  • 2808562 - ETPRO MOBILE_MALWARE Trojan-Spy.AndroidOS.Recal.a Checkin 2 (mobile_malware.rules)
  • 2808563 - ETPRO MOBILE_MALWARE Android/TrojanSMS.Agent.AHB Checkin (mobile_malware.rules)
  • 2808569 - ETPRO MALWARE Win32/Zbot angryflo.ru GET Aug 14 2014 (malware.rules)
  • 2808572 - ETPRO ADWARE_PUP Win32/AdWare.Laban.G Checkin (adware_pup.rules)
  • 2808573 - ETPRO ADWARE_PUP PUP Win32/HiddenStart.B Checkin (adware_pup.rules)
  • 2808576 - ETPRO MALWARE Win32/Rovnix.H GET (malware.rules)
  • 2808580 - ETPRO MALWARE BKDR_QULKONWI.GHR Checkin (malware.rules)
  • 2808583 - ETPRO MOBILE_MALWARE Android.Gabas.A Checkin (mobile_malware.rules)
  • 2808584 - ETPRO MOBILE_MALWARE Trojan.AndroidOS.Fakeguard.a Checkin (mobile_malware.rules)
  • 2808585 - ETPRO MOBILE_MALWARE Trojan.AndroidOS.Fakeguard.a Checkin 2 (mobile_malware.rules)
  • 2808589 - ETPRO MOBILE_MALWARE Android/Maver.A Checkin (mobile_malware.rules)
  • 2808591 - ETPRO ADWARE_PUP PUP.Optional.OneMoreGame.A checkin (adware_pup.rules)
  • 2808596 - ETPRO MALWARE Win32/Tiny.o Checkin (malware.rules)
  • 2808598 - ETPRO MALWARE Wetware Bot Checkin (malware.rules)
  • 2808600 - ETPRO MALWARE Backdoor.Perl.Shellbot.B IRC Checkin (malware.rules)
  • 2808604 - ETPRO MALWARE W32.Virut IRC checkin (malware.rules)
  • 2808606 - ETPRO MOBILE_MALWARE Trojan.AndroidOS.Wirec.a Checkin (mobile_malware.rules)
  • 2808607 - ETPRO MOBILE_MALWARE Trojan.AndroidOS.Wirec.a Checkin 2 (mobile_malware.rules)
  • 2808608 - ETPRO MOBILE_MALWARE Android.Riskware.SMSPay.AO Checkin 3 (mobile_malware.rules)
  • 2808613 - ETPRO MOBILE_MALWARE RemoteAdmin.AndroidOS.Wodsha.a Checkin (mobile_malware.rules)
  • 2808615 - ETPRO MOBILE_MALWARE Trojan.AndroidOS.MTK.d Checkin (mobile_malware.rules)
  • 2808616 - ETPRO MOBILE_MALWARE Android/SMSreg.HS Checkin (mobile_malware.rules)
  • 2808623 - ETPRO ADWARE_PUP Adware C2 via Twitter (adware_pup.rules)
  • 2808641 - ETPRO MALWARE W32/Badur.ZYP Checkin (malware.rules)
  • 2808647 - ETPRO MALWARE Backdoor.Win32.Stantinko.A Checkin (malware.rules)
  • 2808648 - ETPRO MALWARE Backdoor.Win32.Stantinko.A Checkin 2 (malware.rules)
  • 2808652 - ETPRO MALWARE TROJAN-DROPPER.WIN32.DINWOD.SIL Checkin (malware.rules)
  • 2808668 - ETPRO MALWARE TROJAN.WIN32.DIZTAKUN.ATK Checkin FTP (malware.rules)
  • 2808669 - ETPRO MALWARE TROJANSPY.MSIL/GOLROTED.A Checkin FTP (malware.rules)
  • 2808673 - ETPRO MOBILE_MALWARE Android/Spyoo.I Checkin (mobile_malware.rules)
  • 2808684 - ETPRO MOBILE_MALWARE Trojan.AndroidOS.Talp.a Checkin (mobile_malware.rules)
  • 2808686 - ETPRO MALWARE WIN32.AGENT.ADRNK Checkin FTP (malware.rules)
  • 2808698 - ETPRO MALWARE Win32/Paskod.B Downloading Files (malware.rules)
  • 2808699 - ETPRO MALWARE Win32/KFTC.Downloader Checkin (malware.rules)
  • 2808700 - ETPRO MALWARE Win32/KFTC.Downloader Checkin 2 (malware.rules)
  • 2808704 - ETPRO ADWARE_PUP PUP Win32/Adware.MediaFinder Checkin 2 (adware_pup.rules)
  • 2808705 - ETPRO MOBILE_MALWARE Android/SmsSpy.AH Checkin (mobile_malware.rules)
  • 2808708 - ETPRO MALWARE Win32.Farfli Requesting data 2 (malware.rules)
  • 2808710 - ETPRO MALWARE Win32/BrowserPassview sending passwords via SMTP (malware.rules)
  • 2808711 - ETPRO MALWARE W32/VBCheMan.A Checkin 2 (malware.rules)
  • 2808720 - ETPRO MOBILE_MALWARE Android/Univert.B Checkin (mobile_malware.rules)
  • 2808722 - ETPRO MOBILE_MALWARE Android/Tekwon.A Checkin 3 (mobile_malware.rules)
  • 2808724 - ETPRO MOBILE_MALWARE Android/Crosate.D Checkin (mobile_malware.rules)
  • 2808725 - ETPRO MOBILE_MALWARE Android/Crosate.D Checkin 2 (mobile_malware.rules)
  • 2808734 - ETPRO ADWARE_PUP PUA.DNWRandomHack Checkin (adware_pup.rules)
  • 2808737 - ETPRO MALWARE Backdoor.Tsunami Download (malware.rules)
  • 2808742 - ETPRO MALWARE Win32.Darpa Checkin (malware.rules)
  • 2808747 - ETPRO MOBILE_MALWARE Android/Tekwon.A Checkin 4 (mobile_malware.rules)
  • 2808751 - ETPRO MALWARE Win32.Yakes.fvbs Checkin (malware.rules)
  • 2808752 - ETPRO MOBILE_MALWARE Trojan.AndroidOS.MTK.e Checkin (mobile_malware.rules)
  • 2808754 - ETPRO MOBILE_MALWARE Trojan.AndroidOS.Krosec.a Checkin (mobile_malware.rules)
  • 2808769 - ETPRO MALWARE Backdoor.Win32.Androm Requesting payload 2 (malware.rules)
  • 2808770 - ETPRO MALWARE Backdoor.Win32.Androm Requesting payload (malware.rules)
  • 2808772 - ETPRO MALWARE Win32.Yakes.fudl Checkin (malware.rules)
  • 2808773 - ETPRO MOBILE_MALWARE Android/Koler.B Checkin (mobile_malware.rules)
  • 2808774 - ETPRO MALWARE Win32.Sasfis Checkin (malware.rules)
  • 2808776 - ETPRO MALWARE Win32/ProxyChanger.EO Checkin 2 (malware.rules)
  • 2808777 - ETPRO MOBILE_MALWARE Android.Svpeng.D Checkin (mobile_malware.rules)
  • 2808784 - ETPRO MOBILE_MALWARE Android/TrojanSMS.Hippo.Q Checkin (mobile_malware.rules)
  • 2808785 - ETPRO MOBILE_MALWARE RiskTool.AndroidOS.SMSreg.dc Checkin (mobile_malware.rules)
  • 2808788 - ETPRO MOBILE_MALWARE RiskTool.AndroidOS.SMSreg.fb Checkin (mobile_malware.rules)
  • 2808792 - ETPRO MALWARE Win32/FlyAgent variant MYSQL C2 (malware.rules)
  • 2808797 - ETPRO MALWARE Trojan-PSW.Reedum FTP password (malware.rules)
  • 2808799 - ETPRO MOBILE_MALWARE Android.Trojan.SMSSend.LJ Checkin (mobile_malware.rules)
  • 2808802 - ETPRO MOBILE_MALWARE RiskTool.AndroidOS.Zedat.a Checkin (mobile_malware.rules)
  • 2808805 - ETPRO MALWARE Win32/Cendelf.gen!A checkin (malware.rules)
  • 2808806 - ETPRO MOBILE_MALWARE Android/FakeDefender.A Checkin (mobile_malware.rules)
  • 2808807 - ETPRO MALWARE Win32/PSWTool.WebBrowserPassView.B checkin (malware.rules)
  • 2808809 - ETPRO MALWARE Win32/Critroni Tor DNS Proxy lookup (malware.rules)
  • 2808820 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.Agent.aq Checkin (mobile_malware.rules)
  • 2808822 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.FakeInst.a Checkin 4 (mobile_malware.rules)
  • 2808825 - ETPRO MOBILE_MALWARE Android/Agent.CI!tr Checkin (mobile_malware.rules)
  • 2808827 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.Agent.bz Checkin (mobile_malware.rules)
  • 2808838 - ETPRO MOBILE_MALWARE Trojan-Banker.AndroidOS.Wroba.o Checkin (mobile_malware.rules)
  • 2808842 - ETPRO MOBILE_MALWARE Android/Agent.FP Checkin (mobile_malware.rules)
  • 2808843 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.Agent.kh Checkin 2 (mobile_malware.rules)
  • 2808844 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.Agent.kh Response 2 (mobile_malware.rules)
  • 2808845 - ETPRO MALWARE Backdoor.Win32.Bifrose.agn Checkin (malware.rules)
  • 2808846 - ETPRO MALWARE Win32.Banload Variant Checkin (malware.rules)
  • 2808847 - ETPRO ADWARE_PUP Win32.Chifrax.Wuhc Checkin (adware_pup.rules)
  • 2808855 - ETPRO MALWARE TROJANCLICKER.MSIL/EZBRO.A Keep-Alive (malware.rules)
  • 2808857 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.FakeInst.a Checkin 5 (mobile_malware.rules)
  • 2808858 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.FakeInst.a Response (mobile_malware.rules)
  • 2808882 - ETPRO MOBILE_MALWARE Android.Trojan.AutoSMS.BF Checkin (mobile_malware.rules)
  • 2808888 - ETPRO MALWARE Win32/BrowserPassview Checkin via SMTP 2 (malware.rules)
  • 2808889 - ETPRO MOBILE_MALWARE Backdoor.AndroidOS.Masnu.a Checkin (mobile_malware.rules)
  • 2808890 - ETPRO MOBILE_MALWARE Android.Trojan.SMSSend.CH Checkin (mobile_malware.rules)
  • 2808891 - ETPRO MOBILE_MALWARE AndroidOS/Agent.EJ Checkin (mobile_malware.rules)
  • 2808894 - ETPRO MOBILE_MALWARE Android.Trojan.Magwei.A Checkin (mobile_malware.rules)
  • 2808895 - ETPRO MOBILE_MALWARE Android.Trojan.Magwei.A Checkin 2 (mobile_malware.rules)
  • 2808897 - ETPRO MOBILE_MALWARE AndroidOS.Ifacefone.A Checkin (mobile_malware.rules)
  • 2808910 - ETPRO MALWARE Trojan-Spy.MSIL.KeyLogger.babx Checkin (malware.rules)
  • 2808920 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.Agent.mj Checkin (mobile_malware.rules)
  • 2808930 - ETPRO MALWARE Trojan.Backdoor.Prosti CnC (malware.rules)
  • 2808932 - ETPRO MALWARE Win32/Bloodhound.Bancos Checkin (malware.rules)
  • 2808933 - ETPRO MALWARE TrojanSpy.Win32/Bancos.gen!B Checkin via SMTP (malware.rules)
  • 2808938 - ETPRO MOBILE_MALWARE Trojan.AndroidOS.Koler.d Checkin (mobile_malware.rules)
  • 2808953 - ETPRO MOBILE_MALWARE Android.Trojan.FakeInst.DU Checkin (mobile_malware.rules)
  • 2808954 - ETPRO MOBILE_MALWARE AndroidOS.GoldDream.U Checkin (mobile_malware.rules)
  • 2808955 - ETPRO MOBILE_MALWARE Android/Ksapp.L Checkin (mobile_malware.rules)
  • 2808956 - ETPRO MOBILE_MALWARE Backdoor.AndroidOS.Helir.f Checkin (mobile_malware.rules)
  • 2808958 - ETPRO MALWARE Backdoor.Cakwerd Dropping Files (malware.rules)
  • 2808961 - ETPRO MALWARE Mal/Emogen-R Checkin (malware.rules)
  • 2808962 - ETPRO MOBILE_MALWARE Android/Pholoc.C Checkin (mobile_malware.rules)
  • 2808963 - ETPRO MOBILE_MALWARE Android/Pholoc.C Checkin 2 (mobile_malware.rules)
  • 2808966 - ETPRO MOBILE_MALWARE Android.Monitor.Spy2mobile.A Checkin (mobile_malware.rules)
  • 2808967 - ETPRO MOBILE_MALWARE Android/Spyinfo.A Checkin (mobile_malware.rules)
  • 2808968 - ETPRO MOBILE_MALWARE Android/Spyinfo.A Checkin 2 (mobile_malware.rules)
  • 2808971 - ETPRO MOBILE_MALWARE Backdoor.AndroidOS.Carej.b Checkin 2 (mobile_malware.rules)
  • 2808973 - ETPRO MOBILE_MALWARE Trojan-Spy.AndroidOS.Agent.bo Checkin (mobile_malware.rules)
  • 2808974 - ETPRO MALWARE Jaik Variant Checkin (malware.rules)
  • 2808978 - ETPRO MOBILE_MALWARE Android/Selfmite.A Checkin 2 (mobile_malware.rules)
  • 2809006 - ETPRO MALWARE BackDoor.Tishop.2 Checkin (malware.rules)
  • 2809008 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.Agent.op Checkin (mobile_malware.rules)
  • 2809010 - ETPRO MOBILE_MALWARE Backdoor.AndroidOS.Zerat.a / DroidJack RAT Checkin (mobile_malware.rules)
  • 2809020 - ETPRO MALWARE RDN/Spybot.bfr (malware.rules)
  • 2809027 - ETPRO MOBILE_MALWARE Android.Fjcon.B Checkin (mobile_malware.rules)
  • 2809028 - ETPRO MOBILE_MALWARE Trojan-Downloader.AndroidOS.Fsm.b Checkin (mobile_malware.rules)
  • 2809053 - ETPRO MOBILE_MALWARE Android/Rlove.A Checkin (mobile_malware.rules)
  • 2809059 - ETPRO MALWARE Spider Keylogger Checkin HTTP (malware.rules)
  • 2809061 - ETPRO MOBILE_MALWARE Trojan-Spy.AndroidOS.SmForw.eg Checkin (mobile_malware.rules)
  • 2809066 - ETPRO MALWARE Backdoor.Tepmim Checkin (malware.rules)
  • 2809072 - ETPRO MALWARE Win32.RShot Checkin (malware.rules)
  • 2809074 - ETPRO MALWARE WIN32.AGENT.AGLKL Checkin (malware.rules)
  • 2809077 - ETPRO MALWARE JST Perl IrcBot v3.0 HTTP GET Request (malware.rules)
  • 2809102 - ETPRO MOBILE_MALWARE Trojan-Dropper.AndroidOS.Sadpor.g Sending Info via FTP (mobile_malware.rules)
  • 2809104 - ETPRO MALWARE HACKTOOL.WIN32.BRUTEFORCE.PRS Checkin 2 (malware.rules)
  • 2809105 - ETPRO MALWARE HACKTOOL.WIN32.BRUTEFORCE.PRS Checkin (malware.rules)
  • 2809107 - ETPRO MALWARE Win32/Spy.Banker.ABCO Checkin (malware.rules)
  • 2809115 - ETPRO MOBILE_MALWARE Android/Spy.Agent.DF Checkin 2 (mobile_malware.rules)
  • 2809116 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.Agent.qe Checkin (mobile_malware.rules)
  • 2809120 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.FakeInst.a Checkin 6 (mobile_malware.rules)
  • 2809121 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.FakeInst.a Checkin 7 (mobile_malware.rules)
  • 2809122 - ETPRO MOBILE_MALWARE Android/Spy.SmsSpy.N Checkin (mobile_malware.rules)
  • 2809133 - ETPRO MOBILE_MALWARE Backdoor.AndroidOS.Seldor.d Checkin (mobile_malware.rules)
  • 2809137 - ETPRO MALWARE Win32/GameHack.RU Checkin via SQL (malware.rules)
  • 2809138 - ETPRO MOBILE_MALWARE AndroidOS/FakeMarket.A Checkin (mobile_malware.rules)
  • 2809164 - ETPRO MOBILE_MALWARE AndroidOS/Aks.B Checkin (mobile_malware.rules)
  • 2809173 - ETPRO MOBILE_MALWARE Android.Riskware.SmsSend.WUG Checkin (mobile_malware.rules)
  • 2809185 - ETPRO MALWARE Win32.Troj.Reconyc Sending Screenshots and Keystrokes Via SMTP (malware.rules)
  • 2809190 - ETPRO MOBILE_MALWARE Trojan.AndroidOS.MTK.f Checkin (mobile_malware.rules)
  • 2809205 - ETPRO MALWARE Win32.Trojan.Win32/Agent.QRI (Korplug Related) Checkin (malware.rules)
  • 2809206 - ETPRO MALWARE FakeMS.abms Checkin (malware.rules)
  • 2809207 - ETPRO MALWARE Backdoor.W32/OnionDuke.A Checkin (malware.rules)
  • 2809213 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.Galf.a Checkin (mobile_malware.rules)
  • 2809215 - ETPRO MOBILE_MALWARE Trojan-Banker.AndroidOS.Binv.a Checkin (mobile_malware.rules)
  • 2809216 - ETPRO MOBILE_MALWARE Android.Trojan.SmsSpy.FS Checkin (mobile_malware.rules)
  • 2809221 - ETPRO MOBILE_MALWARE Monitor.AndroidOS.SilTracker.a Checkin (mobile_malware.rules)
  • 2809227 - ETPRO MALWARE Win32/Joviddy.A Checkin via IRC (malware.rules)
  • 2809234 - ETPRO MOBILE_MALWARE Trojan.AndroidOS.FakePrin.a Checkin (mobile_malware.rules)
  • 2809237 - ETPRO MALWARE Win32/Filecoder.NCP Ransomware .onion Proxy domain lookup (malware.rules)
  • 2809245 - ETPRO MOBILE_MALWARE Trojan.AndroidOS.FakeDebugger Checkin (mobile_malware.rules)
  • 2809249 - ETPRO MALWARE Backdoor.MSIL.Soaphrish.A checkin (malware.rules)
  • 2809251 - ETPRO MALWARE Win32/Notodar Checkin (malware.rules)
  • 2809252 - ETPRO MALWARE W32/Tepfer.InfoStealer Dropping Files (malware.rules)
  • 2809268 - ETPRO MALWARE W32/PVZ-In Checkin (Operation Cleaver) (malware.rules)
  • 2809276 - ETPRO MALWARE W32/TinyZBot v1 Checkin (Operation Cleaver) (malware.rules)
  • 2809280 - ETPRO MALWARE Win32.Infostealer.Compfolder Checkin (malware.rules)
  • 2809289 - ETPRO MALWARE PWS.Win32.Blankit.A Checkin (malware.rules)
  • 2809295 - ETPRO MALWARE Backdoor.IRC.Azbot CnC via IRC (malware.rules)
  • 2809318 - ETPRO MALWARE Win32/Chanitor.A .onion Proxy domain lookup (malware.rules)
  • 2809319 - ETPRO MOBILE_MALWARE AndroidOS.Riskware.DroidCoupon Checkin (mobile_malware.rules)
  • 2809322 - ETPRO MALWARE Jaik Variant Checkin Response (malware.rules)
  • 2809324 - ETPRO MALWARE Zusy Variant Checkin (malware.rules)
  • 2809334 - ETPRO MALWARE VBS/Cechip.A SSH Banner Checkin (malware.rules)
  • 2809341 - ETPRO MALWARE VBS/Cechip.A SSH Banner Checkin 2 (malware.rules)
  • 2809342 - ETPRO MOBILE_MALWARE Android/TrojanSMS.Feejar.A Checkin (mobile_malware.rules)
  • 2809345 - ETPRO MOBILE_MALWARE Android/Agent.DE Checkin (mobile_malware.rules)
  • 2809352 - ETPRO MALWARE Win32/ChkBot.A IRC Checkin (malware.rules)
  • 2809357 - ETPRO MOBILE_MALWARE Trojan-Banker.AndroidOS.Wroba.b Checkin 2 (mobile_malware.rules)
  • 2809362 - ETPRO MOBILE_MALWARE Trojan-Banker.AndroidOS.Wroba.f Checkin (mobile_malware.rules)
  • 2809368 - ETPRO MALWARE Dyre Keep-Alive POST (malware.rules)
  • 2809373 - ETPRO MOBILE_MALWARE Android/Agent.AK Checkin (mobile_malware.rules)
  • 2809374 - ETPRO MOBILE_MALWARE RiskTool.AndroidOS.SMSreg.fz Checkin (mobile_malware.rules)
  • 2809375 - ETPRO MOBILE_MALWARE AndroidOS.Riskware.DroidCoupon Checkin 2 (mobile_malware.rules)
  • 2809376 - ETPRO MOBILE_MALWARE Trojan-SMS.AndroidOS.Agent.lt Checkin (mobile_malware.rules)
  • 2809378 - ETPRO MALWARE Autoit.F Checkin (malware.rules)
  • 2809379 - ETPRO MALWARE Win32/Laimfin.A Checkin (malware.rules)
  • 2809386 - ETPRO MALWARE PWS.Win32.Mujormel.A Reporting Infection via SMTP (malware.rules)
  • 2809389 - ETPRO MOBILE_MALWARE Android/TrojanSMS.Agent.AHS Checkin (mobile_malware.rules)
  • 2809396 - ETPRO MOBILE_MALWARE Android/Smsir.B Checkin via FTP (mobile_malware.rules)
  • 2809399 - ETPRO MALWARE Win32/Filecoder.NCW Ransomware Checkin (malware.rules)
  • 2809400 - ETPRO MOBILE_MALWARE Trojan-Spy.AndroidOS.Andut.a Checkin (mobile_malware.rules)
  • 2809424 - ETPRO MOBILE_MALWARE Trojan-Spy.AndroidOS.SmForw.h Checkin (mobile_malware.rules)