The web for users, groups and offices. TWiki is an Enterprise Collaboration Platform. http://doc.emergingthreats.net/bin/view/Main Copyright 2008 Emerging Threats and Contributing Authors 2008-07-06T20:19:21Z http://doc.emergingthreats.net/bin/view/Main/2008370 2008-07-06T20:19:21Z

alert tcp $HOME NET any $EXTERNAL NET $HTTP PORTS (msg:"ET MALWARE Shopcenter.co.kr Spyware Install Report"; flow:established,to server; uricontent:"/RewardInstall ... (last changed by TWikiGuest)

TWikiGuest http://doc.emergingthreats.net/bin/view/Main/2001891 2008-07-06T20:19:21Z

alert tcp $HOME NET any $EXTERNAL NET $HTTP PORTS (msg:"ET MALWARE Suspicious User Agent (agent)"; flow: to server,established; content:" 0d 0a User Agent\: agent ... (last changed by TWikiGuest)

TWikiGuest http://doc.emergingthreats.net/bin/view/Main/2008077 2008-07-04T13:35:04Z

alert tcp $HOME NET any $EXTERNAL NET $HTTP PORTS (msg:"ET CURRENT EVENTS Possible Storm Worm EXE Request (fireworks.exe)"; flow:established,to server; content ... (last changed by TWikiGuest)

TWikiGuest http://doc.emergingthreats.net/bin/view/Main/SandnetAnalystsGroup 2008-07-03T19:55:17Z

SandnetAnalystsGroup Member list (comma separated list): Set GROUP MattJonkman, DeapeshMisra, BlakeHartstein, JamesMcQuaid, AndreDiMino, DavidBianco, TeresaGarner ... (last changed by MattJonkman)

MattJonkman http://doc.emergingthreats.net/bin/view/Main/WillForte 2008-07-03T19:37:09Z

My Links .ATasteOfTWiki view a short introductory presentation on TWiki for beginners .WelcomeGuest starting points on TWiki .TWikiUsersGuide ... (last changed by TWikiRegistrationAgent)

TWikiRegistrationAgent http://doc.emergingthreats.net/bin/view/Main/2008367 2008-07-03T19:30:00Z

alert tcp any 20 $HOME NET 25 (msg:"ET MALWARE Possible Windows executable sent when remote host claims to send Javascript"; flow: established; content:" 0d 0a ... (last changed by TWikiGuest)

TWikiGuest http://doc.emergingthreats.net/bin/view/Main/2008368 2008-07-03T19:30:00Z

alert tcp $HOME NET any $EXTERNAL NET $HTTP PORTS (msg:"ET TROJAN Unknown Keylogger checkin"; flow:established; content:"GET"; depth:4; uricontent:"?mail "; uricontent ... (last changed by TWikiGuest)

TWikiGuest http://doc.emergingthreats.net/bin/view/Main/2001685 2008-07-03T19:24:48Z

alert tcp any 20 $HOME NET 25 (msg:"ET MALWARE Possible Windows executable sent when remote host claims to send an image"; flow: established; content:"Content ... (last changed by TWikiGuest)

TWikiGuest http://doc.emergingthreats.net/bin/view/Main/2001684 2008-07-03T19:24:48Z

alert tcp any $HTTP PORTS $HOME NET any (msg:"ET MALWARE Windows executable sent when remote host claims to send image, Win32"; flow: established; content:"Content ... (last changed by TWikiGuest)

TWikiGuest http://doc.emergingthreats.net/bin/view/Main/2008369 2008-07-03T19:24:48Z

alert tcp $HOME NET any $EXTERNAL NET $HTTP PORTS (msg:"ET TROJAN Keylogger Crack by bahman"; flow:established; content:"POST"; depth:5; content:" message 2b keylogger ... (last changed by TWikiGuest)

TWikiGuest http://doc.emergingthreats.net/bin/view/Main/2008366 2008-07-03T15:12:53Z

alert tcp $HOME NET any $EXTERNAL NET 82 (msg:"ET TROJAN LD Pinch Checkin (HTTP POST on port 82)"; flow:established,to server; content:"POST "; depth:5; content ... (last changed by TWikiGuest)

TWikiGuest http://doc.emergingthreats.net/bin/view/Main/2008185 2008-07-03T14:34:46Z

alert tcp $HOME NET any $EXTERNAL NET $HTTP PORTS (msg:"ET TROJAN Win32 Cloaker Related Post Infection Checkin"; flow:established,to server; uricontent:"/log/proc ... (last changed by TWikiGuest)

TWikiGuest http://doc.emergingthreats.net/bin/view/Main/2008365 2008-07-03T04:30:14Z

alert tcp $HOME NET any $EXTERNAL NET $HTTP PORTS (msg:"ET MALWARE Suspicious User Agent (Playtech Downloader)"; flow:to server,established; content:" 0d 0a User ... (last changed by TWikiGuest)

TWikiGuest http://doc.emergingthreats.net/bin/view/Main/2008363 2008-07-03T04:30:14Z

alert tcp $HOME NET any $EXTERNAL NET $HTTP PORTS (msg:"ET MALWARE Suspicious User Agent (ISMYIE)"; flow:to server,established; content:" 0d 0a User Agent\: ISMYIE ... (last changed by TWikiGuest)

TWikiGuest http://doc.emergingthreats.net/bin/view/Main/2008364 2008-07-03T04:30:14Z

alert tcp $HOME NET any $EXTERNAL NET $HTTP PORTS (msg:"ET TROJAN Donkeyp2p Update Detected"; flow:established,to server; content:"GET "; depth:4; uricontent:"donkeyp2p ... (last changed by TWikiGuest)

TWikiGuest http://doc.emergingthreats.net/bin/view/Main/SifuKurt 2008-07-01T23:16:18Z

My Links .ATasteOfTWiki view a short introductory presentation on TWiki for beginners .WelcomeGuest starting points on TWiki .TWikiUsersGuide ... (last changed by TWikiRegistrationAgent)

TWikiRegistrationAgent