# Ruleset Update Summary - 2023/08/07 - v10388 **URL:** \ **Category:** Ruleset Updates\ **Created:** [August 7, 2023, 9:45pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2023-08-07-v10388/840 "2023-08-07T21:45:22Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![rulesbot](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rulesbot](https://community.emergingthreats.net/u/rulesbot)\ **Post date:** [August 7, 2023, 9:45pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2023-08-07-v10388/840/1 "2023-08-07T21:45:22Z")
## Summary: 8 new OPEN, 11 new PRO (8 + 3) Thanks @Jane\_0sint * * * ## Added rules: ### Open: - 2047063 - ET MALWARE IcedID CnC Domain in DNS Lookup (pireltotus .com) (malware.rules) - 2047064 - ET INFO External IP Check Domain in DNS Lookup (api .ipapi .com) (info.rules) - 2047065 - ET INFO Observed External IP Check Domain (api .ipapi .com in TLS SNI) (info.rules) - 2047066 - ET MALWARE [ANY.RUN] PovertyStealer Check-In via TCP (malware.rules) - 2047067 - ET MALWARE [ANY.RUN] PovertyStealer Exfiltration M1 (malware.rules) - 2047068 - ET MALWARE [ANY.RUN] Phemedrone Stealer Exfiltration via Telegram (malware.rules) - 2047069 - ET MALWARE Redis-p2pinfect TLS Certificate Serial Number Observed in SSL Certificate (malware.rules) - 2047070 - ET EXPLOIT\_KIT Parrot TDS Check M2 (exploit\_kit.rules) ### Pro: - 2855032 - ETPRO PHISHING Phishing Domain in DNS Lookup (phishing.rules) - 2855033 - ETPRO MALWARE Observed Phishing Domain in TLS SNI (malware.rules) - 2855034 - ETPRO MALWARE Cobalt Strike Activity (GET) (malware.rules) * * * ## Disabled and modified rules: - 2032318 - ET MALWARE Suspected Jobcrypter Ransomware Exfil (SMTP) (malware.rules) - 2033689 - ET MOBILE\_MALWARE APT33/Charming Kitten Android/LittleLooter Activity (POST) M4 (mobile\_malware.rules) - 2033720 - ET MALWARE Unknown Chinese Threat Actor Malicious Redirect Activity (malware.rules) - 2045623 - ET MALWARE Gamaredon APT Related Domain in DNS Lookup (files-dwn .shop) (malware.rules) - 2046741 - ET MALWARE Cinoshi Clipper Related Domain in DNS Lookup (tryno .ru) (malware.rules) - 2833765 - ETPRO MALWARE OilRig BONDUPDATER C2 via DNS (malware.rules)