# Daily Ruleset Update Summary 2022\\10\\07 **URL:** \ **Category:** Ruleset Updates\ **Created:** [October 7, 2022, 10:08pm UTC](https://community.emergingthreats.net/t/daily-ruleset-update-summary-2022-10-07/76 "2022-10-07T22:08:48Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![trobinson667](https://sea2.discourse-cdn.com/flex016/user_avatar/community.emergingthreats.net/trobinson667/32/544_2.png) [@trobinson667](https://community.emergingthreats.net/u/trobinson667)\ **Post date:** [October 7, 2022, 10:08pm UTC](https://community.emergingthreats.net/t/daily-ruleset-update-summary-2022-10-07/76/1 "2022-10-07T22:08:48Z")
**Summary:** 13 new OPEN, 33 new PRO (13 + 20) Various Android/Spy, Various Trojan-Spy.AndroidOS, Truebot/Silence.Downloader, Win32/RM3Loader, Various Phishing, and Various Adware Thanks @malwareforme @viriback @Slash30Miata Please share issues, feedback, and requests at [https://feedback.emergingthreats.net/feedback](https://feedback.emergingthreats.net/feedback) **Added rules:** **Open:** 2039120 - ET MALWARE TrueBot/Silence.Downlaoder Screenshot Post M1 (malware.rules) 2039121 - ET MALWARE TrueBot/Silence.Downlaoder Screenshot Post M2 (malware.rules) 2039122 - ET MALWARE Win32/RM3Loader Activity (set) (malware.rules) 2039123 - ET MALWARE Observed DNS Query to DonotGroup Domain (stokpro .buzz) (malware.rules) 2039124 - ET USER\_AGENTS Discord Bot User-Agent Observed (DiscordBot) (user\_agents.rules) 2039125 - ET PHISHING DHL Credential Phish Landing Page 2022-10-07 (phishing.rules) 2039126 - ET PHISHING Binance Credential Phish Landing Page 2022-10-07 (phishing.rules) 2039127 - ET ADWARE\_PUP Win32/Adware.WDJiange.A CnC Checkin M1 (adware\_pup.rules) 2039128 - ET ADWARE\_PUP Win32/Adware.Agent.NSF CnC Checkin M1 (adware\_pup.rules) 2039129 - ET EXPLOIT ZKBioSecurity SQL Injection Attempt (CVE-2022-36635) (exploit.rules) 2039130 - ET MALWARE Win32/RM3Loader Server Response (malware.rules) 2039131 - ET PHISHING Successful Binance Credential Phish 2022-10-07 (phishing.rules) 2039132 - ET PHISHING Successful Outlook Phish 2022-10-06 (phishing.rules) **Pro:** 2852507 - ETPRO MOBILE\_MALWARE Android.Joker.1765 CnC Domain in DNS Lookup (mobile\_malware.rules) 2852508 - ETPRO MOBILE\_MALWARE Android.Joker.1765 CnC Beacon (mobile\_malware.rules) 2852509 - ETPRO MOBILE\_MALWARE Trojan.AndroidOS.Harly.p CnC Domain in DNS Lookup (mobile\_malware.rules) 2852510 - ETPRO MOBILE\_MALWARE Trojan-Ransom.AndroidOS.Pletor.a Checkin (mobile\_malware.rules) 2852511 - ETPRO MOBILE\_MALWARE Android/TrojanDropper.Agent.IZL CnC Beacon (mobile\_malware.rules) 2852512 - ETPRO MOBILE\_MALWARE Android/TrojanDropper.Agent.IZL CnC Domain in DNS Lookup (mobile\_malware.rules) 2852513 - ETPRO MOBILE\_MALWARE Trojan-Spy.AndroidOS.SmsThief.sx CnC Domain in DNS Lookup (mobile\_malware.rules) 2852514 - ETPRO MOBILE\_MALWARE Trojan-Banker.AndroidOS.Gustuff.d Checkin (mobile\_malware.rules) 2852515 - ETPRO MOBILE\_MALWARE Android/Spy.SmsSpy.WT CnC Domain in DNS Lookup (mobile\_malware.rules) 2852516 - ETPRO MOBILE\_MALWARE Trojan-Spy.AndroidOS.Malaspy.a Checkin (mobile\_malware.rules) 2852517 - ETPRO MOBILE\_MALWARE Android/Spy.SmsSpy.WT CnC Domain in DNS Lookup (mobile\_malware.rules) 2852518 - ETPRO MOBILE\_MALWARE Android.Spy.1010.origin Checkin (mobile\_malware.rules) 2852519 - ETPRO MOBILE\_MALWARE Android/Spy.Agent.CCM CnC Domain in DNS Lookup (mobile\_malware.rules) 2852520 - ETPRO MOBILE\_MALWARE Android/Spy.Agent.BXZ CnC Domain in DNS Lookup (mobile\_malware.rules) 2852521 - ETPRO MOBILE\_MALWARE Trojan-Banker.AndroidOS.Wroba CnC Response (mobile\_malware.rules) 2852522 - ETPRO MOBILE\_MALWARE Observed Android.SmsSpy.11416 Domain in TLS SNI (mobile\_malware.rules) 2852523 - ETPRO MOBILE\_MALWARE Android/TrojanSMS.Agent.ZB CnC Domain in DNS Lookup (mobile\_malware.rules) 2852524 - ETPRO MALWARE Win32/Remcos RAT Checkin 841 (malware.rules) 2852525 - ETPRO PHISHING Successful Generic Phish 2022-10-07 (phishing.rules) 2852526 - ETPRO PHISHING Successful Ent Credit Union Phish 2022-10-07 (phishing.rules)