Search

Description Name: APT - Suspicious Cgi - HTTP (Request) . This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for Point of Entry or Lateral Movement.The host exhibiting this type of network behavi...

Description Name: Identified Usage Of TLS/SSL EXPORT Cipher Suite . This is Trend Micro detection for HTTPS network protocol that manifests exploit activities and can be used for N/A.The host exhibiting this type of network behavior is likely comprom...

Description Name: ANGLER - Exploit Kit - HTTP (Request) - Variant 7 . This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for N/A.The host exhibiting this type of network behavior is likely compro...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a

Description Name: Possible CVE-2019-0227 Apache Axis Expired Domain to RCE - HTTP (Request) . This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for Point of Entry or Lateral Movement.The host ex...

Description Name: Possible buffer overflow . This is Trend Micro detection for packets passing through SMB network protocols that manifests Exploit activities which can be a potential intrusion. Below are some indicators of unusual behavior:Suspiciou...

Description Name: Seowon Intech WiMAX SWC-9100 RCE - HTTP (Request) . This is Trend Micro detection for packets passing through HTTP network protocols that can be used as Point of Entry or Lateral Movement. This also indicates a malware infection. Be...

using the following names: {Malware Directory}\dkecl Other Details This Hacking Tool does the following: It scans either randomly-generated or specific IP addresses over the Internet to try and exploit

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It requires being executed with a specific

the said sites are inaccessible. Exploit:O97M/CVE-2017-11882 (Microsoft); RDN/Generic Exploit (McAfee); HEUR:Exploit.MSOffice.Generic (Kaspersky); Exp/20180802-B (Sophos) Downloaded from the Internet,

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. As of this writing, the said sites are inaccessible.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a

Description Name: Possible NOP sled . This is Trend Micro detection for packets passing through SMB network protocols that manifests Exploit activities which can be a potential intrusion. Below are some indicators of unusual behavior:Suspicious activ...

It propagates by dropping copies of itself in physical and removable drives. It also propagates over the Internet by attempting to send the exploit code to random Internet addresses. It generates a

Vulnerability Risk Rating: Critical This remote code execution vulnerability exists in the failure of Microsoft SharePoint to check an application package's source markup. Attackers looking to exploit this

Description Name: FILE UPLOAD - HTTP(REQUEST) . This is Trend Micro detection for packets passing through HTTP network protocols that can be used as Point of Entry or Lateral Movement. This also indicates a malware infection. Below are some indicator...

Description Name: REMOTE CODE EXECUTION - HTTP (REQUEST) - Variant 5 . This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for Point of Entry or Lateral Movement.The host exhibiting this type of n...

Description Name: ENVELOPE SQL INJECTION - HTTP(REQUEST) . This is Trend Micro detection for packets passing through HTTP network protocols that can be used as Point of Entry or Lateral Movement. This also indicates a malware infection. Below are som...