GigaVPN

시그니처 리스트, Signature List

번호	날짜	ID	시그니처 (Total Ruleset: 27,111개)
13,011	2015/01/20	2015860	ET TROJAN System Progressive Detection FakeAV (INTEL);
13,010	2015/01/20	2015859	ET CURRENT_EVENTS Metasploit CVE-2012-1723 Attacker.class (Seen in Unknown EK) 11/01/12;
13,009	2015/01/20	2015858	ET CURRENT_EVENTS Sakura/RedKit obfuscated URL;
13,008	2015/01/20	2015857	ET TFTP Outbound TFTP Data Transfer with Cisco config;
13,007	2015/01/20	2015856	ET SNMP Attempt to retrieve Cisco Config via TFTP (CISCO-CONFIG-COPY);
13,006	2015/01/20	2015855	ET TROJAN Georbot checkin;
13,005	2015/01/20	2015854	ET TROJAN Georbot initial checkin;
13,004	2015/01/20	2015853	ET TROJAN Georbot requesting update;
13,003	2015/01/20	2015852	ET DELETED Georgian Targeted Attack - Server Response; [1]
13,002	2015/01/20	2015851	ET DELETED Georgian Targeted Attack - Client Request; [1]
13,001	2015/01/20	2015850	ET TROJAN Georgian Targeted Attack - Trojan Checkin; [1]
13,000	2015/01/20	2015849	ET CURRENT_EVENTS Metasploit CVE-2012-1723 Path (Seen in Unknown EK) 10/29/12;
12,999	2015/01/20	2015848	ET CURRENT_EVENTS Imposter USPS Domain;
12,998	2015/01/20	2015847	ET CURRENT_EVENTS SofosFO/NeoSploit possible second stage landing page;
12,997	2015/01/20	2015846	ET CURRENT_EVENTS NeoSploit Jar with three-letter class names;
12,996	2015/01/20	2015845	ET DELETED pamdql obfuscated javascript __-_ padding;
12,995	2015/01/20	2015844	ET DELETED Blackhole file containing obfuscated Java payload URIs;
12,994	2015/01/20	2015843	ET DELETED Blackhole request for file containing Java payload URIs (1);
12,993	2015/01/20	2015842	ET INFO LLNMR query response to wpad;
12,992	2015/01/20	2015841	ET CURRENT_EVENTS Unknown Exploit Kit Landing Page;
12,991	2015/01/20	2015840	ET CURRENT_EVENTS Unknown Exploit Kit Landing Page;
12,990	2015/01/20	2015837	ET TROJAN SSL Cert Used In Unknown Exploit Kit;
12,989	2015/01/20	2015836	ET CURRENT_EVENTS Blackhole 2.0 Binary Get Request; [1]
12,988	2015/01/20	2015835	ET TROJAN Smoke Loader C2 Response;
12,987	2015/01/20	2015834	ET TROJAN Citadel API Access Video Controller (Inbound); [1,2]
12,986	2015/01/20	2015833	ET DELETED Citadel API Access Video Controller (Outbound); [1,2]
12,985	2015/01/20	2015832	ET TROJAN Citadel API Access Bot Controller (Inbound); [1,2]
12,984	2015/01/20	2015831	ET TROJAN Citadel API Access Bot Controller (Outbound); [1,2]
12,983	2015/01/20	2015830	ET TROJAN Citadel API Access VNC Controller (Inbound); [1,2]
12,982	2015/01/20	2015829	ET TROJAN Citadel API Access VNC Controller (Outbound); [1,2]
12,981	2015/01/20	2015828	ET TROJAN Citadel API Access IFramer Controller (Inbound); [1,2]
12,980	2015/01/20	2015827	ET TROJAN Citadel API Access Iframer Controller (Outbound); [1,2]
12,979	2015/01/20	2015826	ET TROJAN Zeus/Citadel Control Panel Access (Inbound); [1,2]
12,978	2015/01/20	2015825	ET TROJAN Zeus/Citadel Control Panel Access (Outbound); [1,2]
12,977	2015/01/20	2015824	ET TROJAN GeckaSeka User-Agent;
12,976	2015/01/20	2015823	ET DELETED Blackhole Java applet with obfuscated URL Oct 19 2012;
12,975	2015/01/20	2015822	ET INFO Suspicious Windows NT version 9 User-Agent;
12,974	2015/01/20	2015821	ET INFO Suspicious Windows NT version 8 User-Agent;
12,973	2015/01/20	2015820	ET INFO Suspicious Windows NT version 7 User-Agent;
12,972	2015/01/20	2015819	ET CURRENT_EVENTS g01pack Exploit Kit .homelinux. Landing Page;
12,971	2015/01/20	2015818	ET CURRENT_EVENTS g01pack Exploit Kit .homeip. Landing Page;
12,970	2015/01/20	2015817	ET CURRENT_EVENTS Blackhole2 Non-Vulnerable Client Fed Fake Flash Executable; [1]
12,969	2015/01/20	2015816	ET CURRENT_EVENTS CoolEK Font File Download (64-bit Host) Dec 11 2012;
12,968	2015/01/20	2015815	ET CURRENT_EVENTS CoolEK Font File Download (32-bit Host) Dec 11 2012;
12,967	2015/01/20	2015814	ET TROJAN Win32/Fujacks Activity;
12,966	2015/01/20	2015813	ET TROJAN DNS Query Torpig Sinkhole Domain (Possible Infected Host); [1]
12,965	2015/01/20	2015812	ET CURRENT_EVENTS SofosFO Jar file 10/17/12;
12,964	2015/01/20	2015811	ET WEB_SERVER FaTaLisTiCz_Fx Webshell Detected;
12,963	2015/01/20	2015810	ET WEB_CLIENT Adobe Flash Vuln (CVE-2012-1535 Uncompressed) Exploit Specific;
12,962	2015/01/20	2015809	ET WEB_CLIENT Adobe Flash Vuln (CVE-2012-1535 Uncompressed) Exploit Specific;
< 281 282 283 284 285 286 287 288 289 290 >