| 번호 | 날짜 | ID | 시그니처 (Total Ruleset: 27,111개) |
| 14,711 | 2015/01/20 | 2017608 | ET WEB_SERVER PHP WebShell Embedded In JPG (INBOUND); [1] |
| 14,710 | 2015/01/20 | 2017607 | ET WEB_SERVER PHP WebShell Embedded In GIF (INBOUND); [1] |
| 14,709 | 2015/01/20 | 2017606 | ET WEB_SERVER PHP WebShell Embedded In PNG (OUTBOUND); [1] |
| 14,708 | 2015/01/20 | 2017605 | ET WEB_SERVER PHP WebShell Embedded In JPG (OUTBOUND); [1] |
| 14,707 | 2015/01/20 | 2017604 | ET WEB_SERVER PHP WebShell Embedded In GIF (OUTBOUND); [1] |
| 14,706 | 2015/01/20 | 2017603 | ET CURRENT_EVENTS Magnitude EK (formerly Popads) Java Exploit 32-32 byte hex java payload request Oct 16 2013; |
| 14,705 | 2015/01/20 | 2017602 | ET CURRENT_EVENTS Magnitude EK - Landing Page - Java ClassID and 32/32 archive Oct 16 2013; |
| 14,704 | 2015/01/20 | 2017601 | ET CURRENT_EVENTS Nuclear EK CVE-2013-2551 IE Exploit URI Struct; |
| 14,703 | 2015/01/20 | 2017600 | ET TROJAN W32.Nemim Checkin; [1] |
| 14,702 | 2015/01/20 | 2017599 | ET TROJAN Backdoor.Egobot Checkin; [1] |
| 14,701 | 2015/01/20 | 2017598 | ET TROJAN Possible Kelihos.F EXE Download Common Structure; |
| 14,700 | 2015/01/20 | 2017597 | ET CURRENT_EVENTS Neutrino XORed pluginDetect 2; |
| 14,699 | 2015/01/20 | 2017596 | ET CURRENT_EVENTS Neutrino XORed pluginDetect 1; |
| 14,698 | 2015/01/20 | 2017595 | ET CURRENT_EVENTS Possible Neutrino Java Payload Download Oct 15 2013; |
| 14,697 | 2015/01/20 | 2017594 | ET CURRENT_EVENTS Possible Neutrino Java Exploit Download Oct 15 2013; |
| 14,696 | 2015/01/20 | 2017593 | ET CURRENT_EVENTS Neutrino EK Landing URI Format Oct 15 2013; |
| 14,695 | 2015/01/20 | 2017592 | ET CURRENT_EVENTS Unknown Malvertising Related EK Redirect Oct 14 2013; [1] |
| 14,694 | 2015/01/20 | 2017591 | ET CURRENT_EVENTS Unknown Malvertising Related EK Landing Oct 14 2013; [1] |
| 14,693 | 2015/01/20 | 2017590 | ET CURRENT_EVENTS D-LINK Router Backdoor via Specific UA; [1] |
| 14,692 | 2015/01/20 | 2017589 | ET CURRENT_EVENTS Unknown EK Initial Payload Internet Connectivity Check; [1] |
| 14,691 | 2015/01/20 | 2017588 | ET MOBILE_MALWARE Android/Opfake.A Country CnC Beacon; [1] |
| 14,690 | 2015/01/20 | 2017587 | ET MOBILE_MALWARE Android/Opfake.A GetTask CnC Beacon; [1] |
| 14,689 | 2015/01/20 | 2017586 | ET TROJAN Possible W32/KanKan Update officeaddinupdate.xml Request; [1] |
| 14,688 | 2015/01/20 | 2017585 | ET TROJAN Possible W32/KanKan tools.ini Request; [1] |
| 14,687 | 2015/01/20 | 2017584 | ET TROJAN CryptoLocker Ransomware check-in; |
| 14,686 | 2015/01/20 | 2017583 | ET TROJAN CryptoLocker EXE Download; |
| 14,685 | 2015/01/20 | 2017582 | ET TROJAN Citadel Activity POST; |
| 14,684 | 2015/01/20 | 2017580 | ET CURRENT_EVENTS DotkaChef Payload October 09; |
| 14,683 | 2015/01/20 | 2017579 | ET CURRENT_EVENTS SUSPICIOUS Possible Secondary Indicator of Java Exploit (Artifact Observed mostly in EKs/a few mis-configured apps); |
| 14,682 | 2015/01/20 | 2017578 | ET CURRENT_EVENTS Fake MS Security Update EK (Payload Download); |
| 14,681 | 2015/01/20 | 2017577 | ET CURRENT_EVENTS Fiesta EK Landing Oct 09 2013; |
| 14,680 | 2015/01/20 | 2017576 | ET CURRENT_EVENTS Styx EK jply.html; |
| 14,679 | 2015/01/20 | 2017575 | ET WEB_SPECIFIC_APPS Possible VBulletin Unauthorized Admin Account Creation; [1] |
| 14,678 | 2015/01/20 | 2017574 | ET WEB_SPECIFIC_APPS Possible JBoss/JMX EJBInvokerServlet RCE Using Marshalled Object; [1] |
| 14,677 | 2015/01/20 | 2017573 | ET WEB_SPECIFIC_APPS Possible JBoss/JMX InvokerServlet RCE Using Marshalled Object; [1] |
| 14,676 | 2015/01/20 | 2017572 | ET WEB_CLIENT Possible Microsoft Internet Explorer Use-After-Free CVE-2013-3897; |
| 14,675 | 2015/01/20 | 2017571 | ET CURRENT_EVENTS Angler EK Payload Download; |
| 14,674 | 2015/01/20 | 2017570 | ET CURRENT_EVENTS Angler EK Exploit Download; |
| 14,673 | 2015/01/20 | 2017569 | ET CURRENT_EVENTS Angler EK Landing Page; |
| 14,672 | 2015/01/20 | 2017568 | ET CURRENT_EVENTS Possible Metasploit Java CVE-2013-2465 Class Name Sub Algo; [1,2] |
| 14,671 | 2015/01/20 | 2017567 | ET CURRENT_EVENTS FiestaEK js-redirect; |
| 14,670 | 2015/01/20 | 2017566 | ET INFO Obfuscated fromCharCode; |
| 14,669 | 2015/01/20 | 2017565 | ET INFO Obfuscated fromCharCode; |
| 14,668 | 2015/01/20 | 2017564 | ET CURRENT_EVENTS Unknown EK Landing; [1,2] |
| 14,667 | 2015/01/20 | 2017563 | ET CURRENT_EVENTS Possible Java CVE-2013-2465 Based on PoC; [1,2] |
| 14,666 | 2015/01/20 | 2017562 | ET CURRENT_EVENTS Sweet Orange Landing with Applet Oct 4 2013; |
| 14,665 | 2015/01/20 | 2017561 | ET MALWARE W32/Wajam.Adware Successful Install; |
| 14,664 | 2015/01/20 | 2017560 | ET WEB_SPECIFIC_APPS Possible WHMCS SQLi AES_ENCRYPT at start of value; [1] |
| 14,663 | 2015/01/20 | 2017559 | ET TROJAN SSH Connection on 443 - Mevade Banner; |
| 14,662 | 2015/01/20 | 2017558 | ET TROJAN Mevade Checkin; |
| < 241 242 243 244 245 246 247 248 249 250 > |