| 번호 | 날짜 | ID | 시그니처 (Total Ruleset: 27,111개) |
| 13,061 | 2015/01/20 | 2015912 | ET CURRENT_EVENTS Remax - Gmail Creds; |
| 13,060 | 2015/01/20 | 2015911 | ET CURRENT_EVENTS Remax - Yahoo Creds; |
| 13,059 | 2015/01/20 | 2015910 | ET CURRENT_EVENTS Remax - AOL Creds; |
| 13,058 | 2015/01/20 | 2015909 | ET CURRENT_EVENTS - BoA - Creds Phished; |
| 13,057 | 2015/01/20 | 2015908 | ET CURRENT_EVENTS BoA - PII Phished; |
| 13,056 | 2015/01/20 | 2015907 | ET CURRENT_EVENTS BoA -Account Phished; |
| 13,055 | 2015/01/20 | 2015906 | ET CURRENT_EVENTS WSO - WebShell Activity - POST structure; |
| 13,054 | 2015/01/20 | 2015905 | ET CURRENT_EVENTS WSO - WebShell Activity - WSO Title; |
| 13,053 | 2015/01/20 | 2015904 | ET TROJAN Win32/Kuluoz.B CnC 3; [1] |
| 13,052 | 2015/01/20 | 2015903 | ET TROJAN Win32/Kuluoz.B CnC 2; [1] |
| 13,051 | 2015/01/20 | 2015902 | ET TROJAN Win32/Kuluoz.B CnC; [1] |
| 13,050 | 2015/01/20 | 2015901 | ET CURRENT_EVENTS Magnitude EK (formerly Popads) - Landing Page - Java ClassID and 32HexChar.jar; |
| 13,049 | 2015/01/20 | 2015900 | ET INFO Suspicious Windows NT version 3 User-Agent; |
| 13,048 | 2015/01/20 | 2015899 | ET INFO Suspicious Windows NT version 2 User-Agent; |
| 13,047 | 2015/01/20 | 2015898 | ET INFO Suspicious Windows NT version 1 User-Agent; |
| 13,046 | 2015/01/20 | 2015897 | ET CURRENT_EVENTS Possible TDS Exploit Kit /flow redirect at .ru domain; |
| 13,045 | 2015/01/20 | 2015896 | ET TROJAN Andromeda Check-in Response; |
| 13,044 | 2015/01/20 | 2015895 | ET TROJAN Unknown_comee.pl - POST with stpfu in http_client_body; |
| 13,043 | 2015/01/20 | 2015894 | ET TROJAN Unknown FakeAV - /get/*.crp; |
| 13,042 | 2015/01/20 | 2015893 | ET CURRENT_EVENTS CoolEK - PDF Exploit - pdf_old.php; |
| 13,041 | 2015/01/20 | 2015892 | ET CURRENT_EVENTS CoolEK - PDF Exploit - pdf_new.php; |
| 13,040 | 2015/01/20 | 2015891 | ET CURRENT_EVENTS CoolEK - Landing Page - Title; |
| 13,039 | 2015/01/20 | 2015890 | ET CURRENT_EVENTS CoolEK - Landing Page - FlashExploit; |
| 13,038 | 2015/01/20 | 2015889 | ET DELETED SofosFO/NeoSploit possible second stage landing page (1); |
| 13,037 | 2015/01/20 | 2015888 | ET CURRENT_EVENTS Magnitude EK (formerly Popads) Java Exploit Kit 32 byte hex with trailing digit java payload request; |
| 13,036 | 2015/01/20 | 2015887 | ET WEB_CLIENT Possible exploitation of CVE-2012-5076 by an exploit kit Nov 13 2012; |
| 13,035 | 2015/01/20 | 2015886 | ET CURRENT_EVENTS CirtXPack - No Java URI - /a.Test; |
| 13,034 | 2015/01/20 | 2015885 | ET CURRENT_EVENTS CritXPack - No Java URI - Dot.class; |
| 13,033 | 2015/01/20 | 2015884 | ET CURRENT_EVENTS CritXPack Landing Page; |
| 13,032 | 2015/01/20 | 2015883 | ET CURRENT_EVENTS Java Exploit Campaign SetAttribute Java Applet; [1] |
| 13,031 | 2015/01/20 | 2015882 | ET CURRENT_EVENTS KaiXin Exploit Kit Landing Page parseInt Javascript Replace; [1] |
| 13,030 | 2015/01/20 | 2015881 | ET CURRENT_EVENTS KaiXin Exploit Kit Landing Page NOP String; [1] |
| 13,029 | 2015/01/20 | 2015878 | ET POLICY Maxmind geoip check to /app/geoip.js; |
| 13,028 | 2015/01/20 | 2015877 | ET CURRENT_EVENTS Blackhole 16/32-hex/a-z.php Landing Page URI; |
| 13,027 | 2015/01/20 | 2015876 | ET CURRENT_EVENTS SofosFO Jar file 09 Nov 12; |
| 13,026 | 2015/01/20 | 2015875 | ET TROJAN DNS Query Known Reveton Domain whatwillber.com; |
| 13,025 | 2015/01/20 | 2015874 | ET TROJAN Known Reveton Domain HTTP whatwillber.com; |
| 13,024 | 2015/01/20 | 2015873 | ET CURRENT_EVENTS Cool Exploit Kit Requesting Payload; |
| 13,023 | 2015/01/20 | 2015872 | ET CURRENT_EVENTS Blackhole request for Payload; |
| 13,022 | 2015/01/20 | 2015871 | ET CURRENT_EVENTS Blackhole request for file containing Java payload URIs (3); |
| 13,021 | 2015/01/20 | 2015870 | ET TROJAN Backdoor.ADDNEW (DarKDdoser) CnC 3; [1] |
| 13,020 | 2015/01/20 | 2015869 | ET TROJAN Backdoor.ADDNEW (DarKDdoser) CnC 2; [1] |
| 13,019 | 2015/01/20 | 2015868 | ET TROJAN Backdoor.ADDNEW (DarKDdoser) CnC 1; [1] |
| 13,018 | 2015/01/20 | 2015867 | ET CURRENT_EVENTS Sophos PDF Standard Encryption Key Length Buffer Overflow; |
| 13,017 | 2015/01/20 | 2015866 | ET CURRENT_EVENTS Sophos PDF Standard Encryption Key Length Buffer Overflow; |
| 13,016 | 2015/01/20 | 2015865 | ET CURRENT_EVENTS Self-Singed SSL Cert Used in Conjunction with Neosploit; |
| 13,015 | 2015/01/20 | 2015864 | ET DELETED Blackhole 2.0 PDF GET request; [1] |
| 13,014 | 2015/01/20 | 2015863 | ET CURRENT_EVENTS Blackhole request for file containing Java payload URIs (2); |
| 13,013 | 2015/01/20 | 2015862 | ET TROJAN Potentially Unwanted Program RebateInformerSetup.exe Download Reporting; [1] |
| 13,012 | 2015/01/20 | 2015861 | ET TROJAN System Progressive Detection FakeAV (AMD); |
| < 281 282 283 284 285 286 287 288 289 290 > |