# Ruleset Update Summary - 2024/06/19 - v10621 **URL:** \ **Category:** Ruleset Updates\ **Created:** [June 19, 2024, 8:56pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2024-06-19-v10621/1738 "2024-06-19T20:56:22Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![rulesbot](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rulesbot](https://community.emergingthreats.net/u/rulesbot)\ **Post date:** [June 19, 2024, 8:56pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2024-06-19-v10621/1738/1 "2024-06-19T20:56:22Z")
## Summary: 4 new OPEN, 10 new PRO (4 + 6) * * * ## Added rules: ### Open: - 2053745 - ET EXPLOIT\_KIT ZPHP Domain in DNS Lookup (rvandccc .com) (exploit\_kit.rules) - 2053746 - ET EXPLOIT\_KIT ZPHP Domain in DNS Lookup (pelicanbcnsolutions .com) (exploit\_kit.rules) - 2053747 - ET EXPLOIT\_KIT ZPHP Domain in TLS SNI (rvandccc .com) (exploit\_kit.rules) - 2053748 - ET EXPLOIT\_KIT ZPHP Domain in TLS SNI (pelicanbcnsolutions .com) (exploit\_kit.rules) ### Pro: - 2857286 - ETPRO MALWARE Python Cstealer/SatanStealer Exfiltrating to Discord CnC (malware.rules) - 2857287 - ETPRO MALWARE Python Cstealer/SatanStealer Discord JS Inject Inbound (malware.rules) - 2857288 - ETPRO MOBILE\_MALWARE Android/Spy.Agent.DGI CnC Domain in DNS Lookup (mobile\_malware.rules) - 2857289 - ETPRO MOBILE\_MALWARE Android/Spy.Agent.BRN CnC Domain in DNS Lookup (mobile\_malware.rules) - 2857290 - ETPRO MOBILE\_MALWARE Android/Spy.Agent.DCP CnC Domain in DNS Lookup (mobile\_malware.rules) - 2857291 - ETPRO MOBILE\_MALWARE Android/Spy.Banker.BZD CnC Domain in DNS Lookup (mobile\_malware.rules) * * * ## Disabled and modified rules: - 2049412 - ET MALWARE SocGholish Domain in DNS Lookup (dashboard .renovationsruth .com) (malware.rules) - 2049413 - ET MALWARE SocGholish Domain in TLS SNI (dashboard .renovationsruth .com) (malware.rules)