David Wharton
@whartond2 followers159 downloads45 copies16 likes1,903 views
14 detections
Filters
Last updated
All Time
Detection languages
10
3
1
Categories
11
10
4
1
1
Platforms
11
3
1
1
Products / Services
10
1
1
1
1
MITRE Techniques
7
6
4
3
3
CVEs
6
2
1
IDS Classtypes
9
1
IDS Protocols
10
Detects the connection of an IP KVM (Keyboard, Video, Mouse) device, which could be used for unauthorized remote access or data exfiltration.
Detects the installation of specific malicious versions of several npm packages. Threat actors gained access to maintainer accounts via a phishing campaign and published compromised versions containing malware. The payloads ranged from a Windows-based information stealer (Scavenger) to a cross-platform JavaScript backdoor.
Detects attempts to exploit multiple buffer overflow vulnerabilities (CVE-2025-8184, CVE-2025-8169, CVE-2025-8168) in D-Link DIR-513 routers via the 'curTime' parameter in formSetWan endpoints.
A USB device with Vendor ID 0E90 is associated with vendor WiebeTech (a.k.a "CRU"), which is known to manufacture "mouse jigglers." These hardware devices can be used to prevent a computer from automatically locking the screen or going to sleep. Illegitimate use can range from policy violation to nefarious activity like remote desktop abuse.
Page 2 of 2