Aaron Mog
@AaronMogS2S0 followers2,630 downloads339 copies154 likes9,064 views
76 detections
Filters
Last updated
All Time
Detection languages
50
16
10
Categories
19
11
9
8
6
Platforms
28
12
7
5
2
Products / Services
4
4
4
3
3
MITRE Techniques
26
22
22
22
20
CVEs
4
2
1
Detects network connections or file events related to Ratty RAT malware distribution using PDF, HTML, Dropbox, Ngrok, and MediaFire.
Detects attempts to exploit a URL parsing confusion vulnerability in OAuth redirect URIs, potentially leading to account takeover, based on a specific pattern involving multiple '@' symbols and IPv6 literals as described in the referenced article.
Detects process execution or network connections related to the malicious PyPI packages 'deepseeek' and 'deepseekai', which steal environment variables and send them to a Pipedream C2.
Detects attempts to manipulate the 'com.apple.scopedbookmarksagent.xpc' keychain item using the security command as part of CVE-2025-31191 in macOS sandbox escape.
Detects the execution of mstsc.exe pointing to RDP files in temporary directories typical for email attachments, potentially indicating malicious activity as seen in the UNC5837 "Rogue RDP" campaign.
Detects the creation of a fake user account with a specific name and password pattern by ToyMaker threat actor to gain administrative access.
Page 8 of 8