# Ruleset Update Summary - 2024/01/09 - v10502

**URL:** <https://community.emergingthreats.net/t/ruleset-update-summary-2024-01-09-v10502/1268>\
**Category:** Ruleset Updates\
**Created:** [January 9, 2024, 10:16pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2024-01-09-v10502/1268 "2024-01-09T22:16:13Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ishaughnessy](https://sea2.discourse-cdn.com/flex016/user_avatar/community.emergingthreats.net/ishaughnessy/32/491_2.png) [@ishaughnessy](https://community.emergingthreats.net/u/ishaughnessy)\
**Post date:** [January 9, 2024, 10:16pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2024-01-09-v10502/1268/1 "2024-01-09T22:16:13Z")

</div>

# Summary:

8 new OPEN, 10 new PRO (8 + 2)

## Added rules:

### Open:

- 2049947 - ET MALWARE Suspected FalseFont Backdoor Activity M1 - (malware.rules)
- 2049948 - ET MALWARE Suspected FalseFont Backdoor Activity M2 - (malware.rules)
- 2049949 - ET MALWARE Lumma Stealer Related Domain in DNS Lookup (evokenumberpottruckere .fun) - (malware.rules)
- 2049950 - ET MALWARE Observed Lumma Stealer Related Domain (evokenumberpottruckere .fun in TLS SNI) - (malware.rules)
- 2049951 - ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (goddirtybrilliancece .fun) - (malware.rules)
- 2049952 - ET MALWARE Observed Lumma Stealer Related Domain (goddirtybrilliancece .fun in TLS SNI) - (malware.rules)
- 2049953 - ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (maskmusicalproplemanw .pw) - (malware.rules)
- 2049954 - ET MALWARE Observed Lumma Stealer Related Domain (maskmusicalproplemanw .pw in TLS SNI) - (malware.rules)

### Pro:

- 2856121 - ETPRO MALWARE Win32/Unknown Bot CnC Activity (M3) - (malware.rules)
- 2856122 - ETPRO MALWARE Win32/Unknown Bot CnC Response - (malware.rules)
