Nozomi Networks Labs

Guardian Community Edition Assertions (Queries) for COVID-19 Cybersecurity

New assertions (queries) have been added to Guardian Community Edition to help with COVID-19-related cybersecurity challenges.

Queries that check for communications with malicious IP addresses and URLs

Queries that check the number of simultaneous remote connections and generate alerts if the number surpasses a threshold.

COVID-19 Malware: OT and IoT Threat Intelligence

To help your organization proactively detect and prevent COVID-19 themed cyberattacks, download our network indicators, ransomware and malware threat intelligence.

Network IOCs (Indicators of Compromise)

Yara rules for detecting coronavirus ransomware

Yara rules for detecting COVID-19 Informer malware

List of hashes that detect malicious files

SNORT rule for detecting network infection

URGENT/11 Nmap NSE Script for Detecting Vulnerabilities

Our Nmap NSE script for detecting URGENT/11 vulnerabilities is a research tool for quickly checking industrial systems for vulnerable assets based on the version of VxWorks exposed within the FTP service.

Due the fact that is not always possible to detect the running version, we recommend that industrial operators use full featured security products for effective vulnerability assessment.