Ruleset Update Summary - 2024/09/02 - v10679

Ruleset Updates
1

Summary:

8 new OPEN, 12 new PRO (8 + 4)

Added rules:

Open:

  • 2055682 - ET EXPLOIT_KIT Credit Card Skimmer Domain in DNS Lookup (creatlva .shop) (exploit_kit.rules)
  • 2055683 - ET EXPLOIT_KIT Credit Card Skimmer Domain in DNS Lookup (sellifypro .com) (exploit_kit.rules)
  • 2055684 - ET EXPLOIT_KIT Credit Card Skimmer Domain in TLS SNI (creatlva .shop) (exploit_kit.rules)
  • 2055685 - ET EXPLOIT_KIT Credit Card Skimmer Domain in TLS SNI (sellifypro .com) (exploit_kit.rules)
  • 2055686 - ET MALWARE SocGholish CnC Domain in DNS Lookup (* .podcast .lisameyerson .com) (malware.rules)
  • 2055687 - ET MALWARE SocGholish CnC Domain in TLS SNI (* .podcast .lisameyerson .com) (malware.rules)
  • 2055688 - ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (securityassociationgoa .com) (exploit_kit.rules)
  • 2055689 - ET EXPLOIT_KIT ZPHP Domain in TLS SNI (securityassociationgoa .com) (exploit_kit.rules)

Pro:

  • 2858235 - ETPRO MALWARE TA582 Domain in DNS Lookup (malware.rules)
  • 2858236 - ETPRO MALWARE TA582 Domain in DNS Lookup (malware.rules)
  • 2858237 - ETPRO MALWARE TA582 Domain in DNS Lookup (malware.rules)
  • 2858238 - ETPRO MALWARE TA582 Domain in DNS Lookup (malware.rules)