February 2012 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Wed Feb 1 08:34:48 EST 2012
Ending: Wed Feb 29 23:30:57 EST 2012
Messages: 318

• [Emerging-Sigs] SIGS: Various Malware sigs and Carberp DDOS module UAs   Kevin Ross
  • [Emerging-Sigs] SIGS: Various Malware sigs and Carberp DDOS module UAs   Martin Holste
• [Emerging-Sigs] SIGS: Trojan Sigs   Kevin Ross
  • [Emerging-Sigs] SIGS: Trojan Sigs   Matthew Jonkman
• [Emerging-Sigs] anyone recognize this? Delf?   harry.tuttle
  • [Emerging-Sigs] anyone recognize this? Delf?   Matthew Jonkman
• [Emerging-Sigs] Proposed Signature for Blackhole Exploit Landing id=   Nathan
  • [Emerging-Sigs] Proposed Signature for Blackhole Exploit Landing id=   Nathan
    • [Emerging-Sigs] Proposed Signature for Blackhole Exploit Landing id=   Chris Wakelin
      • [Emerging-Sigs] Proposed Signature for Blackhole Exploit Landing id=   Chris Wakelin
  • [Emerging-Sigs] Proposed Signature for Blackhole Exploit Landing id=   Chris Wakelin
  • [Emerging-Sigs] Proposed Signature for Blackhole Exploit Landing id=   Matthew Jonkman
    • [Emerging-Sigs] Proposed Signature for Blackhole Exploit Landing id=   Nathan
• [Emerging-Sigs] "MSUpdater" trojan   harry.tuttle
  • [Emerging-Sigs] "MSUpdater" trojan   Edward Fjellskål
    • [Emerging-Sigs] "MSUpdater" trojan   harry.tuttle
  • [Emerging-Sigs] "MSUpdater" trojan   Matthew Jonkman
• [Emerging-Sigs] Daily Ruleset Update Summary 2/1/2012   Matthew Jonkman
• [Emerging-Sigs] SIGS: Trojan and Incognito & Modification   Kevin Ross
  • [Emerging-Sigs] SIGS: Trojan and Incognito & Modification   Matthew Jonkman
• [Emerging-Sigs] Request for sandbox quality stats   Martin Holste
• [Emerging-Sigs] SIGS: TLD4 Purple Haze & Specific MS12-004 Midi Being Used   Kevin Ross
  • [Emerging-Sigs] SIGS: TLD4 Purple Haze & Specific MS12-004 Midi Being Used   Matthew Jonkman
• [Emerging-Sigs] ET MALWARE User-Agent (Yodao Desktop Dict) 2011123   Russell Fulton
  • [Emerging-Sigs] ET MALWARE User-Agent (Yodao Desktop Dict) 2011123   Matthew Jonkman
• [Emerging-Sigs] StillSecure: 10 New Signatures - 3rd Feb 2012   Rajendraprasad Kokkiligada
• [Emerging-Sigs] PHP remote code exec   Edward Fjellskål
  • [Emerging-Sigs] PHP remote code exec   Edward Fjellskål
    • [Emerging-Sigs] PHP remote code exec   Edward Fjellskål
      • [Emerging-Sigs] PHP remote code exec   Victor Julien
      • [Emerging-Sigs] PHP remote code exec   Edward Fjellskål
      • [Emerging-Sigs] PHP remote code exec   Matthew Jonkman
      • [Emerging-Sigs] PHP remote code exec   Victor Julien
• [Emerging-Sigs] ZMeu scans from IBM   Martin Holste
  • [Emerging-Sigs] ZMeu scans from IBM   Michael Scheidell
• [Emerging-Sigs] ET WEB_CLIENT Shockwave Flash with full AllowScriptAccess   Pedro Marinho
• [Emerging-Sigs] Daily Ruleset Update Summary 2/4/2012   Matthew Jonkman
  • [Emerging-Sigs] Daily Ruleset Update Summary 2/4/2012   harry.tuttle
    • [Emerging-Sigs] Daily Ruleset Update Summary 2/4/2012   waldo kitty
      • [Emerging-Sigs] Daily Ruleset Update Summary 2/4/2012   harry.tuttle
• [Emerging-Sigs] How can i prevent from the MS09-004 and MS08-040 HIRisk ?   M.Turner Turner
  • [Emerging-Sigs] How can i prevent from the MS09-004 and MS08-040 HIRisk ?   Joel Esler
• [Emerging-Sigs] SIGS: 2 Policy & CutePack Exploit Kit   Kevin Ross
  • [Emerging-Sigs] SIGS: 2 Policy & CutePack Exploit Kit   Kevin Ross
    • [Emerging-Sigs] SIGS: 2 Policy & CutePack Exploit Kit   Matthew Jonkman
• [Emerging-Sigs] Malwareurl.com Top 250 Update   jason.weir at nhrs.org
• [Emerging-Sigs] SIGS: Exploit Kit Sigs   Kevin Ross
  • [Emerging-Sigs] SIGS: Exploit Kit Sigs   Matthew Jonkman
• [Emerging-Sigs] Suricata Brainstorming Session Tomorrow!   Matthew Jonkman
• [Emerging-Sigs] More Blackhole Sigs Proposed   Nathan
  • [Emerging-Sigs] More Blackhole Sigs Proposed   Chris Wakelin
    • [Emerging-Sigs] More Blackhole Sigs Proposed   Bad Horse
    • [Emerging-Sigs] More Blackhole Sigs Proposed   Nathan
  • [Emerging-Sigs] More Blackhole Sigs Proposed   Matthew Jonkman
• [Emerging-Sigs] 2011894 may still need some tweaking   harry.tuttle
  • [Emerging-Sigs] 2011894 may still need some tweaking   Matthew Jonkman
    • [Emerging-Sigs] 2011894 may still need some tweaking   harry.tuttle
      • [Emerging-Sigs] 2011894 may still need some tweaking   Matthew Jonkman
• [Emerging-Sigs] January Sig Contest Winner!   Matthew Jonkman
• [Emerging-Sigs] New sig: "Dapato/Cleaman" checkin   harry.tuttle
  • [Emerging-Sigs] New sig: "Dapato/Cleaman" checkin   Martin Holste
    • [Emerging-Sigs] New sig: "Dapato/Cleaman" checkin   Matthew Jonkman
• [Emerging-Sigs] Daily Ruleset Update Summary 2/6/2012   Matthew Jonkman
• [Emerging-Sigs] Join the Suricata Brainstorming Session   Matthew Jonkman
  • [Emerging-Sigs] Join the Suricata Brainstorming Session   Edward Fjellskål
    • [Emerging-Sigs] Join the Suricata Brainstorming Session   Matthew Jonkman
  • [Emerging-Sigs] [Discussion] Join the Suricata Brainstorming Session   Eric Leblond
• [Emerging-Sigs] Drive by sites distributing bredolab - *.ru:8080   Eoin Miller
• [Emerging-Sigs] Alienvault Classifications   Mike Lococo
  • [Emerging-Sigs] Alienvault Classifications   Martin Holste
  • [Emerging-Sigs] Alienvault Classifications   Matthew Jonkman
    • [Emerging-Sigs] Alienvault Classifications   Martin Holste
      • [Emerging-Sigs] Alienvault Classifications   Matthew Jonkman
      • [Emerging-Sigs] Alienvault Classifications   Martin Holste
      • [Emerging-Sigs] Alienvault Classifications   Matthew Jonkman
      • [Emerging-Sigs] Alienvault Classifications   David Glosser
      • [Emerging-Sigs] Alienvault Classifications   David Glosser
      • [Emerging-Sigs] Alienvault Classifications   Martin Holste
      • [Emerging-Sigs] Alienvault Classifications   Matthew Jonkman
      • [Emerging-Sigs] Alienvault Classifications   Kevin Ross
• [Emerging-Sigs] SHELLCODE x86 inc ecx NOOP - for Yahoo   Balasubramaniam Natarajan
  • [Emerging-Sigs] SHELLCODE x86 inc ecx NOOP - for Yahoo   waldo kitty
    • [Emerging-Sigs] SHELLCODE x86 inc ecx NOOP - for Yahoo   Balasubramaniam Natarajan
      • [Emerging-Sigs] SHELLCODE x86 inc ecx NOOP - for Yahoo   Joel Esler
      • [Emerging-Sigs] SHELLCODE x86 inc ecx NOOP - for Yahoo   waldo kitty
      • [Emerging-Sigs] SHELLCODE x86 inc ecx NOOP - for Yahoo   Joel Esler
• [Emerging-Sigs] Daily Ruleset Update Summary 2/8/2012   Matthew Jonkman
• [Emerging-Sigs] Is this legit?   Paul Halliday
  • [Emerging-Sigs] Is this legit?   Packet Hack
    • [Emerging-Sigs] Is this legit?   Paul Halliday
• [Emerging-Sigs] Fwd: FP for ET MOBILE_MALWARE XML Style POST Of IMEI International Mobile Equipment Identity 2013138   Russell Fulton
  • [Emerging-Sigs] FP for ET MOBILE_MALWARE XML Style POST Of IMEI International Mobile Equipment Identity 2013138   Matthew Jonkman
• [Emerging-Sigs] [RFP] ET POLICY Windows-Media-Player Using IPv4 Address Host Header   L0rd Ch0de1m0rt
  • [Emerging-Sigs] [PHI] [RFP] ET POLICY Windows-Media-Player Using IPv4 Address Host Header   Nathan
    • [Emerging-Sigs] [PHI] [RFP] ET POLICY Windows-Media-Player Using IPv4 Address Host Header   Matthew Jonkman
• [Emerging-Sigs] FP 2014106 "ET TROJAN Zeus POST Request to CnC - content-type variation"   harry.tuttle
  • [Emerging-Sigs] FP 2014106 "ET TROJAN Zeus POST Request to CnC - content-type variation"   Matthew Jonkman
• [Emerging-Sigs] Trojan data exfil to Sendspace.com   Charles Riggs
  • [Emerging-Sigs] Trojan data exfil to Sendspace.com   Martin Holste
  • [Emerging-Sigs] Trojan data exfil to Sendspace.com   Michael Scheidell
  • [Emerging-Sigs] Trojan data exfil to Sendspace.com   Kevin Ross
• [Emerging-Sigs] ET CURRENT_EVENTS tspy_spcesend.A Data Exfil   Charles Riggs
  • [Emerging-Sigs] ET CURRENT_EVENTS tspy_spcesend.A Data Exfil   Matthew Jonkman
• [Emerging-Sigs] HOIC DDoS Analysis and Detection   Christopher Granger
• [Emerging-Sigs] New Sig   harry.tuttle
  • [Emerging-Sigs] New Sig   harry.tuttle
    • [Emerging-Sigs] New Sig   Matthew Jonkman
• [Emerging-Sigs] Daily Ruleset Update Summary 2/10/2012   Matthew Jonkman
• [Emerging-Sigs] time to update 2011582 - vulnerable java version 1.6   Russell Fulton
  • [Emerging-Sigs] time to update 2011582 - vulnerable java version 1.6   Matthew Jonkman
    • [Emerging-Sigs] time to update 2011582 - vulnerable java version 1.6   Chris Wakelin
• [Emerging-Sigs] SIGS: Malware   Kevin Ross
• [Emerging-Sigs] Proposed Signatures - Invalid multiple spacing after Mozilla version and before parenthesis   Nathan
  • [Emerging-Sigs] Proposed Signatures - Invalid multiple spacing after Mozilla version and before parenthesis   Nathan
  • [Emerging-Sigs] Proposed Signatures - Invalid multiple spacing after Mozilla version and before parenthesis   Matthew Jonkman
    • [Emerging-Sigs] Proposed Signatures - Invalid multiple spacing after Mozilla version and before parenthesis   Nathan
• [Emerging-Sigs] ET TROJAN Malicious getpvstat.php file Reporting 2014182   Russell Fulton
  • [Emerging-Sigs] ET TROJAN Malicious getpvstat.php file Reporting 2014182   harry.tuttle
    • [Emerging-Sigs] ET TROJAN Malicious getpvstat.php file Reporting 2014182   Martin Holste
      • [Emerging-Sigs] ET TROJAN Malicious getpvstat.php file Reporting 2014182   Packet Hack
• [Emerging-Sigs] time to update 2011582 - vulnerable java version 1.6   Russell Fulton
• [Emerging-Sigs] SIG: ET MALWARE FTP Retrieval of EXE File   Kevin Ross
• [Emerging-Sigs] Proposed Signature - ET CURRENT_EVENTS Hostile PDF associated with Laik Exploit Kit   Nathan
  • [Emerging-Sigs] Proposed Signature - ET CURRENT_EVENTS Hostile PDF associated with Laik Exploit Kit   Nathan
• [Emerging-Sigs] ET TROJAN ICE-IX config.php Checkin   Kevin Ross
  • [Emerging-Sigs] ET TROJAN ICE-IX config.php Checkin   harry.tuttle
• [Emerging-Sigs] APT rules   Jaime Blasco
  • [Emerging-Sigs] APT rules   Matthew Jonkman
    • [Emerging-Sigs] APT rules   Will Metcalf
      • [Emerging-Sigs] APT rules   Nathan
      • [Emerging-Sigs] APT rules   Charles Conn
      • [Emerging-Sigs] APT rules   Jaime Blasco
      • [Emerging-Sigs] APT rules   Christopher Granger
      • [Emerging-Sigs] APT rules   Matthew Jonkman
• [Emerging-Sigs] puzzle over thresholding...   Russell Fulton
  • [Emerging-Sigs] puzzle over thresholding...   waldo kitty
    • [Emerging-Sigs] puzzle over thresholding...   Russell Fulton
      • [Emerging-Sigs] puzzle over thresholding...   waldo kitty
      • [Emerging-Sigs] puzzle over thresholding...   Jeff Kell
      • [Emerging-Sigs] puzzle over thresholding...   Russell Fulton
      • [Emerging-Sigs] puzzle over thresholding...   Victor Julien
      • [Emerging-Sigs] puzzle over thresholding...   waldo kitty
      • [Emerging-Sigs] puzzle over thresholding...   Joel Esler
      • [Emerging-Sigs] puzzle over thresholding...   Joel Esler
      • [Emerging-Sigs] puzzle over thresholding...   Joel Esler
• [Emerging-Sigs] Daily Ruleset Update Summary 2/14/2012   Matthew Jonkman
• [Emerging-Sigs] SIG: ET CURRENT_EVENTS Zhi Zhu Exploit Pack JavaScript Replace Spider   Kevin Ross
• [Emerging-Sigs] Unknown Exploit Kit - Request for more information   Nathan
  • [Emerging-Sigs] Unknown Exploit Kit - Request for more information   Chris Wakelin
    • [Emerging-Sigs] [SURBL] Re: Unknown Exploit Kit - Request for more information   Nathan
• [Emerging-Sigs] UA header misuse detection experiment   Victor Julien
• [Emerging-Sigs] Malware NfLog   Jaime Blasco
  • [Emerging-Sigs] Malware NfLog   Edward Fjellskål
    • [Emerging-Sigs] Malware NfLog   Edward Fjellskål
      • [Emerging-Sigs] Malware NfLog   Matthew Jonkman
  • [Emerging-Sigs] Malware NfLog   Matthew Jonkman
• [Emerging-Sigs] ASafaWeb Automated Security Analyser for ASP.NET Websites   Nick Randolph
  • [Emerging-Sigs] ASafaWeb Automated Security Analyser for ASP.NET Websites   Matthew Jonkman
• [Emerging-Sigs] FPs for ET POLICY FTP Login Successful (non-anonymous)   Russell Fulton
  • [Emerging-Sigs] FPs for ET POLICY FTP Login Successful (non-anonymous)   Matthew Jonkman
    • [Emerging-Sigs] FPs for ET POLICY FTP Login Successful (non-anonymous)   waldo kitty
• [Emerging-Sigs] SIGS: Various malware specific and malware behaviour sigs   Kevin Ross
  • [Emerging-Sigs] SIGS: Various malware specific and malware behaviour sigs   Matthew Jonkman
• [Emerging-Sigs] ET ACTIVEX Visio Viewer ActiveX control possible exploit   Pedro Marinho
• [Emerging-Sigs] APSB12-03   Michael Lubinski
• [Emerging-Sigs] ET ACTIVEX Visio Viewer ActiveX control possible exploit   Pedro Marinho
• [Emerging-Sigs] SID:2014228 - FP's   Eoin Miller
  • [Emerging-Sigs] SID:2014228 - FP's   Matthew Jonkman
  • [Emerging-Sigs] SID:2014228 - FP's   Michael Scheidell
• [Emerging-Sigs] Falses on 2012688/ET CURRENT_EVENTS Potential Blackhole Exploit Pack landing   Packet Hack
  • [Emerging-Sigs] Falses on 2012688/ET CURRENT_EVENTS Potential Blackhole Exploit Pack landing   Packet Hack
    • [Emerging-Sigs] Falses on 2012688/ET CURRENT_EVENTS Potential Blackhole Exploit Pack landing   Matthew Jonkman
• [Emerging-Sigs] Daily Ruleset Update Summary 2/16/2012   Matthew Jonkman
• [Emerging-Sigs] downloader sig   harry.tuttle
  • [Emerging-Sigs] downloader sig   harry.tuttle
  • [Emerging-Sigs] downloader sig   Matthew Jonkman
• [Emerging-Sigs] StillSecure: 10 New Signatures - 17th Feb 2012   signatures at stillsecure.com
• [Emerging-Sigs] FP : WEB-CLIENT Microsoft Internet Explorer malformed iframe buffer overflow attempt   Balasubramaniam Natarajan
  • [Emerging-Sigs] FP : WEB-CLIENT Microsoft Internet Explorer malformed iframe buffer overflow attempt   Joel Esler
    • [Emerging-Sigs] FP : WEB-CLIENT Microsoft Internet Explorer malformed iframe buffer overflow attempt   Joel Esler
      • [Emerging-Sigs] FP : WEB-CLIENT Microsoft Internet Explorer malformed iframe buffer overflow attempt   waldo kitty
      • [Emerging-Sigs] FP : WEB-CLIENT Microsoft Internet Explorer malformed iframe buffer overflow attempt   Joel Esler
      • [Emerging-Sigs] FP : WEB-CLIENT Microsoft Internet Explorer malformed iframe buffer overflow attempt   waldo kitty
      • [Emerging-Sigs] FP : WEB-CLIENT Microsoft Internet Explorer malformed iframe buffer overflow attempt   Joel Esler
      • [Emerging-Sigs] FP : WEB-CLIENT Microsoft Internet Explorer malformed iframe buffer overflow attempt   waldo kitty
      • [Emerging-Sigs] FP : WEB-CLIENT Microsoft Internet Explorer malformed iframe buffer overflow attempt   Martin Holste
      • [Emerging-Sigs] FP : WEB-CLIENT Microsoft Internet Explorer malformed iframe buffer overflow attempt   Victor Julien
      • [Emerging-Sigs] FP : WEB-CLIENT Microsoft Internet Explorer malformed iframe buffer overflow attempt   Jason Wallace
      • [Emerging-Sigs] FP : WEB-CLIENT Microsoft Internet Explorer malformed iframe buffer overflow attempt   Martin Holste
      • [Emerging-Sigs] FP : WEB-CLIENT Microsoft Internet Explorer malformed iframe buffer overflow attempt   Joel Esler
      • [Emerging-Sigs] FP : WEB-CLIENT Microsoft Internet Explorer malformed iframe buffer overflow attempt   Peter Bates
      • [Emerging-Sigs] FP : WEB-CLIENT Microsoft Internet Explorer malformed iframe buffer overflow attempt   Edward Fjellskål
    • [Emerging-Sigs] FP : WEB-CLIENT Microsoft Internet Explorer malformed iframe buffer overflow attempt   Balasubramaniam Natarajan
• [Emerging-Sigs] Change in ET POLICY Http Client Body contains password in cleartext rules   Guillermo Grande
  • [Emerging-Sigs] Change in ET POLICY Http Client Body contains password in cleartext rules   Matthew Jonkman
    • [Emerging-Sigs] Change in ET POLICY Http Client Body contains password in cleartext rules   Balasubramaniam Natarajan
      • [Emerging-Sigs] Change in ET POLICY Http Client Body contains password in cleartext rules   Matthew Jonkman
• [Emerging-Sigs] New Blackhole   Chris Wakelin
  • [Emerging-Sigs] New Blackhole   Martin Holste
    • [Emerging-Sigs] New Blackhole   Chris Wakelin
  • [Emerging-Sigs] New Blackhole   Matthew Jonkman
    • [Emerging-Sigs] New Blackhole   Kevin Ross
      • [Emerging-Sigs] New Blackhole   Chris Wakelin
      • [Emerging-Sigs] New Blackhole   Matthew Jonkman
• [Emerging-Sigs] new sigs for Sefnit   harry.tuttle
  • [Emerging-Sigs] new sigs for Sefnit   Matthew Jonkman
    • [Emerging-Sigs] new sigs for Sefnit   harry.tuttle
• [Emerging-Sigs] Daily Ruleset Update Summary 2/21/2012   Matthew Jonkman
• [Emerging-Sigs] Necessary modification to sid:2014136 "ET CURRENT_EVENTS Unknown Java Exploit Version Check with hidden applet"   Nathan
  • [Emerging-Sigs] Necessary modification to sid:2014136 "ET CURRENT_EVENTS Unknown Java Exploit Version Check with hidden applet"   Matthew Jonkman
    • [Emerging-Sigs] Necessary modifications   Chris Wakelin
      • [Emerging-Sigs] Necessary modifications   Matthew Jonkman
    • [Emerging-Sigs] Necessary modification to sid:2014136 "ET CURRENT_EVENTS Unknown Java Exploit Version Check with hidden applet"   Nathan
• [Emerging-Sigs] FP on 2011894   harry.tuttle
  • [Emerging-Sigs] FP on 2011894   Matthew Jonkman
• [Emerging-Sigs] Sigs for TDS and exploitkit   jurg at jurg.no
  • [Emerging-Sigs] Sigs for TDS and exploitkit   Eoin Miller
• [Emerging-Sigs] Trustezeb sig   harry.tuttle
  • [Emerging-Sigs] Trustezeb sig   Matthew Jonkman
• [Emerging-Sigs] Sig idea - try2check.me   AD
  • [Emerging-Sigs] Sig idea - try2check.me   Matthew Jonkman
    • [Emerging-Sigs] Sig idea - try2check.me   AD
• [Emerging-Sigs] 2 SIGS: ET TROJAN W32/Rovnix   Kevin Ross
  • [Emerging-Sigs] 2 SIGS: ET TROJAN W32/Rovnix   Matt Jonkman
• [Emerging-Sigs] StillSecure: 10 New Signatures - 24th Feb 2012   signatures at stillsecure.com
  • [Emerging-Sigs] StillSecure: 10 New Signatures - 24th Feb 2012   JJC
• [Emerging-Sigs] IDS Signature Modification Suggestion - ET MALWARE Possible Windows executable sent when remote host claims to send html content   Anupam Kumar
• [Emerging-Sigs] Proposed Signature - BLackhole Tax Landing   Nathan
  • [Emerging-Sigs] Proposed Signature - BLackhole Tax Landing   Nathan
    • [Emerging-Sigs] Proposed Signature - BLackhole Tax Landing   Matthew Jonkman
• [Emerging-Sigs] More Blackhole updates   Chris Wakelin
  • [Emerging-Sigs] More Blackhole updates   Chris Wakelin
    • [Emerging-Sigs] More Blackhole updates   Matthew Jonkman
      • [Emerging-Sigs] More Blackhole updates   Martin Holste
      • [Emerging-Sigs] More Blackhole updates   Chris Wakelin
• [Emerging-Sigs] ET DROP Known Bot C&C Server Traffic TCP (group 204) - 98.138.19.88   Jason Wallace
  • [Emerging-Sigs] ET DROP Known Bot C&C Server Traffic TCP (group 204) - 98.138.19.88   Matthew Jonkman
• [Emerging-Sigs] Sig Modification - ET MALWARE Possible Windows executable sent when remote host claims to send html content   Anupam Kumar
• [Emerging-Sigs] SIG:ET TROJAN W32/DarkComet Second Stage Download Request   Kevin Ross
  • [Emerging-Sigs] SIG:ET TROJAN W32/DarkComet Second Stage Download Request   Matt Jonkman
  • [Emerging-Sigs] bothunter.net   Moshe Ben-Simon
    • [Emerging-Sigs] bothunter.net   Matt Jonkman
      • [Emerging-Sigs] bothunter.net   Moshe Ben-Simon
      • [Emerging-Sigs] bothunter.net   Matt Jonkman
      • [Emerging-Sigs] bothunter.net   Moshe Ben-Simon
• [Emerging-Sigs] Backhole hcp update   harry.tuttle
  • [Emerging-Sigs] Backhole hcp update   Matthew Jonkman
• [Emerging-Sigs] .ch.vu sigs   harry.tuttle
  • [Emerging-Sigs] .ch.vu sigs   Edward Fjellskål
    • [Emerging-Sigs] .ch.vu sigs   harry.tuttle
      • [Emerging-Sigs] .ch.vu sigs   Rodrigo Montoro(Sp0oKeR)
      • [Emerging-Sigs] .ch.vu sigs   Joel Esler
      • [Emerging-Sigs] .ch.vu sigs   Nathan
      • [Emerging-Sigs] .ch.vu sigs   Edward Fjellskål
      • [Emerging-Sigs] .ch.vu sigs   Edward Fjellskål
      • [Emerging-Sigs] .ch.vu sigs   Nathan
      • [Emerging-Sigs] .ch.vu sigs   Nathan
      • [Emerging-Sigs] .ch.vu sigs   Edward Fjellskål
  • [Emerging-Sigs] .ch.vu sigs   Matthew Jonkman
• [Emerging-Sigs] Proposed Signature - "ET MALWARE Java Archive sent when remote host claims image"   Nathan
  • [Emerging-Sigs] Proposed Signature - "ET MALWARE Java Archive sent when remote host claims image"   Matt Jonkman
• [Emerging-Sigs] Daily Ruleset Update Summary 2/24/2012   Matt Jonkman
• [Emerging-Sigs] RE : Re: Sig idea - try2check.me   DA
• [Emerging-Sigs] RE : Re: RE : Re: Sig idea - try2check.me   rmkml at yahoo.fr
  • [Emerging-Sigs] RE : Re: RE : Re: Sig idea - try2check.me   AD
• [Emerging-Sigs] EvilGrade upgrades - script to create rules   AD
• [Emerging-Sigs] RE : Re: RE : Re: RE : Re: Sig idea - try2check.me   rmkml at yahoo.fr
• [Emerging-Sigs] Necessary Changes to "ET CURRENT_EVENTS Blackhole Java Exploit request to /content/jav.jar"   Nathan
  • [Emerging-Sigs] Necessary Changes to "ET CURRENT_EVENTS Blackhole Java Exploit request to /content/jav.jar"   Matt Jonkman
    • [Emerging-Sigs] Necessary Changes to "ET CURRENT_EVENTS Blackhole Java Exploit request to /content/jav.jar"   Rodrigo Montoro(Sp0oKeR)
      • [Emerging-Sigs] Necessary Changes to "ET CURRENT_EVENTS Blackhole Java Exploit request to /content/jav.jar"   Chris Wakelin
    • [Emerging-Sigs] Necessary Changes to "ET CURRENT_EVENTS Blackhole Java Exploit request to /content/jav.jar"   Chris Wakelin
• [Emerging-Sigs] Daily Ruleset Update Summary 2/27/2012   Matthew Jonkman
• [Emerging-Sigs] [Rule Update Proposal] "ET CURRENT_EVENTS Ghost Click DNSChanger DNS Request (UDP)" [2013906]   Christopher Granger
  • [Emerging-Sigs] [Rule Update Proposal] "ET CURRENT_EVENTS Ghost Click DNSChanger DNS Request (UDP)" [2013906]   Christopher Granger
    • [Emerging-Sigs] [Rule Update Proposal] "ET CURRENT_EVENTS Ghost Click DNSChanger DNS Request (UDP)" [2013906]   Christopher Granger
      • [Emerging-Sigs] [Rule Update Proposal] "ET CURRENT_EVENTS Ghost Click DNSChanger DNS Request (UDP)" [2013906]   Matthew Jonkman
      • [Emerging-Sigs] [Rule Update Proposal] "ET CURRENT_EVENTS Ghost Click DNSChanger DNS Request (UDP)" [2013906]   Christopher Granger
• [Emerging-Sigs] Proposed Signatures - "ET CURRENT_EVENTS Blackhole Landing" - Catch All approach   Nathan
• [Emerging-Sigs] Duplicate sig 2012606   Eric Romang
  • [Emerging-Sigs] Duplicate sig 2012606   Matthew Jonkman
• [Emerging-Sigs] Win32/Kryptik.ABNC Checkin   Martin Holste
  • [Emerging-Sigs] Win32/Kryptik.ABNC Checkin   L0rd Ch0de1m0rt
    • [Emerging-Sigs] Win32/Kryptik.ABNC Checkin   Will Metcalf
      • [Emerging-Sigs] Win32/Kryptik.ABNC Checkin   Will Metcalf
      • [Emerging-Sigs] Win32/Kryptik.ABNC Checkin   Martin Holste
      • [Emerging-Sigs] Win32/Kryptik.ABNC Checkin   Matthew Jonkman
      • [Emerging-Sigs] Win32/Kryptik.ABNC Checkin   Martin Holste
      • [Emerging-Sigs] Win32/Kryptik.ABNC Checkin   Matthew Jonkman
• [Emerging-Sigs] TROJAN SIGS   Kevin Ross
  • [Emerging-Sigs] TROJAN SIGS   Matthew Jonkman
• [Emerging-Sigs] User-Agent: AHTTPConnection   Anestis Bechtsoudis
  • [Emerging-Sigs] User-Agent: AHTTPConnection   Smellslike phish
    • [Emerging-Sigs] User-Agent: AHTTPConnection   Anestis Bechtsoudis
• [Emerging-Sigs] Backdoor.Win32.PEx.942728546 Checkin UA Signature   Micah Kays
  • [Emerging-Sigs] Backdoor.Win32.PEx.942728546 Checkin UA Signature   Matthew Jonkman
• [Emerging-Sigs] Daily Ruleset Update Summary 2/29/2012   Matthew Jonkman
• [Emerging-Sigs] PMWiki Exploit attempt containing "eval(base64_decode("   Packet Hack
  • [Emerging-Sigs] PMWiki Exploit attempt containing "eval(base64_decode("   Matt Jonkman
• [Emerging-Sigs] Peed sig   harry.tuttle
• [Emerging-Sigs] Online sandbox comparison results   Martin Holste
• [Emerging-Sigs] Java Drive from a different angle   Balasubramaniam Natarajan
• [Emerging-Sigs] Java 1.6.0_30 and below, being exploited by drive by kits and another rhino sig   Eoin Miller
  • [Emerging-Sigs] Java 1.6.0_30 and below, being exploited by drive by kits and another rhino sig   Matt Jonkman
    • [Emerging-Sigs] Java 1.6.0_30 and below, being exploited by drive by kits and another rhino sig   Chris Wakelin
      • [Emerging-Sigs] Java 1.6.0_30 and below, being exploited by drive by kits and another rhino sig   Eoin Miller
      • [Emerging-Sigs] Java 1.6.0_30 and below, being exploited by drive by kits and another rhino sig   Matthew Jonkman
  • [Emerging-Sigs] Java 1.6.0_30 and below, being exploited by drive by kits and another rhino sig   Eoin Miller
    • [Emerging-Sigs] Java 1.6.0_30 and below, being exploited by drive by kits and another rhino sig   Martin Holste
      • [Emerging-Sigs] Java 1.6.0_30 and below, being exploited by drive by kits and another rhino sig   Eoin Miller
• [Emerging-Sigs] Part-time Blackhole on compromised sites   Chris Wakelin
  • [Emerging-Sigs] Part-time Blackhole on compromised sites   Eoin Miller
• [Emerging-Sigs] Sids 2102438, 2102439, 2102440   Ward Sladek
• [Emerging-Sigs] Double Coverage   Eoin Miller
  • [Emerging-Sigs] Double Coverage   Chris Wakelin
  • [Emerging-Sigs] Double Coverage   Nathan Fowler
• [Emerging-Sigs] Likely FPs ET TROJAN Malicious getpvstat.php file Reporting : 2014182   Russell Fulton
  • [Emerging-Sigs] Likely FPs ET TROJAN Malicious getpvstat.php file Reporting : 2014182   Russell Fulton

Last message date: Wed Feb 29 23:30:57 EST 2012
Archived on: Mon Mar 5 23:04:14 EST 2012

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...