# Ruleset Update Summary - 2023/10/09 - v10435 **URL:** \ **Category:** Ruleset Updates\ **Created:** [October 9, 2023, 8:31pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2023-10-09-v10435/1022 "2023-10-09T20:31:30Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![rulesbot](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rulesbot](https://community.emergingthreats.net/u/rulesbot)\ **Post date:** [October 9, 2023, 8:31pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2023-10-09-v10435/1022/1 "2023-10-09T20:31:30Z")
## Summary: 14 new OPEN, 26 new PRO (14 + 12) * * * ## Added rules: ### Open: - 2048493 - ET INFO ISO File Downloaded (info.rules) - 2048494 - ET ADWARE\_PUP DNS Query to PacketShare Proxy API Domain (api .packetshare .io) (adware\_pup.rules) - 2048495 - ET ADWARE\_PUP Observed PacketShare Proxy Domain Domain (api .packetshare .io in TLS SNI) (adware\_pup.rules) - 2048496 - ET ADWARE\_PUP PacketShare Proxy Connection Init (POST) (adware\_pup.rules) - 2048497 - ET ADWARE\_PUP PacketShare Proxy Connection Heartbeat (POST) (adware\_pup.rules) - 2048498 - ET ADWARE\_PUP PacketShare Proxy Client Login (GET) (adware\_pup.rules) - 2048499 - ET INFO Filesharing Domain in DNS Lookip (lifeboxtransfer .com) (info.rules) - 2048500 - ET INFO Observed Filesharing Domain (lifeboxtransfer .com in TLS SNI) (info.rules) - 2048501 - ET EXPLOIT\_KIT ZPHP Domain in DNS Lookup (configuratorpro .com) (exploit\_kit.rules) - 2048502 - ET EXPLOIT\_KIT ZPHP Domain in DNS Lookup (antiqueglossary .com) (exploit\_kit.rules) - 2048503 - ET EXPLOIT\_KIT ZPHP Domain in TLS SNI (configuratorpro .com) (exploit\_kit.rules) - 2048504 - ET EXPLOIT\_KIT ZPHP Domain in TLS SNI (antiqueglossary .com) (exploit\_kit.rules) - 2048505 - ET MALWARE SocGholish Domain in DNS Lookup (sommelier .peppertreecanyon .com) (malware.rules) - 2048506 - ET MALWARE SocGholish Domain in TLS SNI (sommelier .peppertreecanyon .com) (malware.rules) ### Pro: - 2855334 - ETPRO MALWARE Malicious Domain in DNS Lookup (malware.rules) - 2855335 - ETPRO MALWARE Observed Malicious Domain in TLS SNI (malware.rules) - 2855336 - ETPRO MALWARE Cryptex Related Domain in DNS Lookup (malware.rules) - 2855337 - ETPRO MALWARE Observed Cryptex Related Domain in TLS SNI (malware.rules) - 2855338 - ETPRO MALWARE Possible Cryptex OPTIONS Request (malware.rules) - 2855339 - ETPRO MALWARE Cryptex 302 Redirect (malware.rules) - 2855340 - ETPRO EXPLOIT\_KIT ZPHP Lure Request M2 (exploit\_kit.rules) - 2855341 - ETPRO EXPLOIT\_KIT ZPHP Request M3 (exploit\_kit.rules) - 2855342 - ETPRO MALWARE TA582 Domain in DNS Lookup (malware.rules) - 2855343 - ETPRO MALWARE TA582 Domain in DNS Lookup (malware.rules) - 2855344 - ETPRO MALWARE TA582 Domain in HTTP HOST (malware.rules) - 2855345 - ETPRO MALWARE TA582 Domain in HTTP HOST (malware.rules)