Name / Title | Added | Expires | Hits | Comments | Syntax | |
---|---|---|---|---|---|---|
C2 IPs of Raccoon v2 | Jul 28th, 2022 | Never | 7,026 | 0 | None | - |
PrivateLoader main component strings | Apr 21st, 2022 | Never | 11,198 | 1 | None | - |
PrivateLoader loader component strings | Apr 21st, 2022 | Never | 5,331 | 0 | None | - |
PrivateLoader campaign 27 | Apr 21st, 2022 | Never | 5,257 | 0 | None | - |
Kaseya REvil Configuration | Jul 6th, 2021 | Never | 5,017 | 0 | JSON | - |
List of C&C domains of REvil | Jul 6th, 2021 | Never | 6,657 | 0 | None | - |
ZLoader Indicators | Jan 29th, 2021 | Never | 6,335 | 0 | None | - |
Qakbot Indicators | Jan 29th, 2021 | Never | 6,301 | 0 | None | - |
Dridex Indicators | Jan 29th, 2021 | Never | 6,444 | 0 | None | - |
Trickbot Indicators | Jan 29th, 2021 | Never | 6,105 | 0 | None | - |
Emotet Indicators | Jan 29th, 2021 | Never | 6,105 | 0 | None | - |
List of threat names to block the exploitation attempts made with FireEye Red Team Tools | Dec 10th, 2020 | Never | 9,828 | 0 | None | - |
SEO poisoning indicators | Oct 17th, 2018 | Never | 20,239 | 0 | None | - |
MageCart compromised domains | Sep 28th, 2018 | Never | 21,511 | 0 | None | - |
RuMMS v2.0 hashes | Jun 5th, 2018 | Never | 21,243 | 0 | None | - |
SpyNote RAT payload MD5s | Jan 24th, 2017 | Never | 23,128 | 0 | None | - |
Magento compromised sites | Sep 23rd, 2016 | Never | 24,460 | 0 | None | - |
Tech Support scam compromised sites | Sep 23rd, 2016 | Never | 24,348 | 0 | None | - |
Hits by FQDN | Jan 19th, 2016 | Never | 25,717 | 0 | None | - |
Unique iframe Trampoline URLs | Jan 19th, 2016 | Never | 26,745 | 0 | None | - |
Necurs Callback IPs | Jan 11th, 2016 | Never | 23,390 | 0 | None | - |
Neutrino Landing Pages | Jan 11th, 2016 | Never | 24,319 | 0 | None | - |
Neutrino Infected Sites | Jan 11th, 2016 | Never | 23,408 | 0 | None | - |
Nuclear Landing Page Domains 2015-09-23 | Sep 23rd, 2015 | Never | 24,430 | 0 | None | - |
Nuclear Compromised/Redirect Hostnames 2015-09-23 | Sep 23rd, 2015 | Never | 25,474 | 0 | None | - |
Nuclear Landing Page Host IPs 2015-09-23 | Sep 23rd, 2015 | Never | 23,133 | 0 | None | - |
20150820 Neutrino Domains & URLs | Aug 20th, 2015 | Never | 24,472 | 0 | None | - |
Compromised WordPress | Jun 4th, 2015 | Never | 23,430 | 0 | None | - |
Blue_Botnet UAS List | May 19th, 2015 | Never | 24,303 | 0 | None | - |
Blue_Botnet blog list | May 19th, 2015 | Never | 23,572 | 0 | None | - |
Blue_Botnet proxy IP:PORT | May 19th, 2015 | Never | 152,811 | 0 | None | - |
20150403 Angler Domain Shadowing - full domains | Apr 3rd, 2015 | Never | 25,237 | 0 | None | - |
20150403 Angler Domain Shadowing - Primary domains | Apr 3rd, 2015 | Never | 23,834 | 0 | None | - |