# Ruleset Update Summary - 2023/10/27 - v10450 **URL:** \ **Category:** Ruleset Updates\ **Created:** [October 27, 2023, 9:08pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2023-10-27-v10450/1073 "2023-10-27T21:08:45Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![rulesbot](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rulesbot](https://community.emergingthreats.net/u/rulesbot)\ **Post date:** [October 27, 2023, 9:08pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2023-10-27-v10450/1073/1 "2023-10-27T21:08:45Z")
## Summary: 9 new OPEN, 10 new PRO (9 + 1) Thanks @suyog41 * * * ## Added rules: ### Open: - 2048921 - ET INFO Observed DNS Over HTTPS Domain (us1 .blissdns .net in TLS SNI) (info.rules) - 2048922 - ET COINMINER Observed DNS Query to Monero Miner Related Domain (monerohash .com) (coinminer.rules) - 2048923 - ET WEB\_SERVER Generic Webshell Activity (POST) (web\_server.rules) - 2048924 - ET MALWARE Win32/NewsRat CnC Response (malware.rules) - 2048925 - ET WEB\_SPECIFIC\_APPS Possible F5 BIG-IP AJP Request Smuggling Attempt (CVE-2023-46747) (web\_specific\_apps.rules) - 2048926 - ET EXPLOIT\_KIT ZPHP Domain in DNS Lookup (cubicalwave .com) (exploit\_kit.rules) - 2048927 - ET EXPLOIT\_KIT ZPHP Domain in DNS Lookup (defeatdiseasewithdata .com) (exploit\_kit.rules) - 2048928 - ET EXPLOIT\_KIT ZPHP Domain in TLS SNI (cubicalwave .com) (exploit\_kit.rules) - 2048929 - ET EXPLOIT\_KIT ZPHP Domain in TLS SNI (defeatdiseasewithdata .com) (exploit\_kit.rules) ### Pro: - 2855498 - ETPRO MALWARE Possible DarkGate AutoIT Script Download (malware.rules)