Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

8 detections

ET MOBILE_MALWARE Klopatra CnC Domain in DNS Lookup (guncel-tv-player-lnat .]com)
avatar
Tim Peck@timpeck
avatar
Proofpoint Emerging Threats Rules
1 year ago
0143
ET MOBILE_MALWARE Observed Klopatra Domain (guncel-tv-player-lnat .]com) in TLS SNI
avatar
Tim Peck@timpeck
avatar
Proofpoint Emerging Threats Rules
1 year ago
1039
ET MOBILE_MALWARE Observed Klopatra Domain (adsservice2 .org) in TLS SNI
avatar
Tim Peck@timpeck
avatar
Proofpoint Emerging Threats Rules
1 year ago
1037
ET MOBILE_MALWARE Observed Klopatra Domain (adsservices .uk) in TLS SNI
avatar
Tim Peck@timpeck
avatar
Proofpoint Emerging Threats Rules
1 year ago
0031
ET MOBILE_MALWARE Klopatra CnC Domain in DNS Lookup (adsservice2 .org)
avatar
Tim Peck@timpeck
avatar
Proofpoint Emerging Threats Rules
1 year ago
0029
ET MOBILE_MALWARE Klopatra CnC Domain in DNS Lookup (adsservices .uk)
avatar
Tim Peck@timpeck
avatar
Proofpoint Emerging Threats Rules
1 year ago
0027
ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sanguen .courses)
avatar
Tim Peck@timpeck
avatar
Proofpoint Emerging Threats Rules
1 year ago
0032
ET MALWARE Observed Win32/Lumma Stealer Related Domain (sanguen .courses) in TLS SNI
avatar
Tim Peck@timpeck
avatar
Proofpoint Emerging Threats Rules
1 year ago
0021