Summary:
7 new OPEN, 8 new PRO (7 + 1)
Added rules:
Open:
- 2053697 - ET EXPLOIT_KIT Parrot TDS Check 2024-06-17 (exploit_kit.rules)
- 2053698 - ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (icarusairlines .com) (exploit_kit.rules)
- 2053699 - ET EXPLOIT_KIT ZPHP Domain in TLS SNI (icarusairlines .com) (exploit_kit.rules)
- 2053700 - ET MALWARE ZPHP CnC Domain in DNS Lookup (hamaraneta .com) (malware.rules)
- 2053701 - ET MALWARE ZPHP CnC Domain in TLS SNI (hamaraneta .com) (malware.rules)
- 2053702 - ET MALWARE SocGholish CnC Domain in DNS Lookup (* .pages .microcloud360 .com) (malware.rules)
- 2053703 - ET MALWARE SocGholish CnC Domain in TLS SNI (* .pages .microcloud360 .com) (malware.rules)
Pro:
- 2857226 - ETPRO EXPLOIT_KIT ZPHP Fake Browser Update Lure (exploit_kit.rules)