# Ruleset Update Summary - 2024/09/11 - v10687 **URL:** \ **Category:** Ruleset Updates\ **Created:** [September 11, 2024, 8:33pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2024-09-11-v10687/1967 "2024-09-11T20:33:05Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![rulesbot](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rulesbot](https://community.emergingthreats.net/u/rulesbot)\ **Post date:** [September 11, 2024, 8:33pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2024-09-11-v10687/1967/1 "2024-09-11T20:33:05Z")
## Summary: 6 new OPEN, 7 new PRO (6 + 1) * * * ## Added rules: ### Open: - 2055818 - ET INFO DYNAMIC\_DNS Query to a \* .ltlegl .com Domain (info.rules) - 2055819 - ET INFO DYNAMIC\_DNS HTTP Request to a \* .ltlegl .com Domain (info.rules) - 2055820 - ET EXPLOIT\_KIT CC Skimmer Domain in DNS Lookup (marketiqhub .com) (exploit\_kit.rules) - 2055821 - ET EXPLOIT\_KIT CC Skimmer Domain in TLS SNI (marketiqhub .com) (exploit\_kit.rules) - 2055822 - ET EXPLOIT\_KIT ZPHP Domain in DNS Lookup (simplymecosmetics .com) (exploit\_kit.rules) - 2055823 - ET EXPLOIT\_KIT ZPHP Domain in TLS SNI (simplymecosmetics .com) (exploit\_kit.rules) ### Pro: - 2858333 - ETPRO MALWARE Win32/zgRAT CnC Checkin (malware.rules) * * * ## Modified inactive rules: - 2038755 - ET MALWARE Observed DNS Query to Temporary File Hosting Domain (temp .sh) (malware.rules)