# Ruleset Update Summary - 2024/10/30 - v10731 **URL:** \ **Category:** Ruleset Updates\ **Created:** [October 30, 2024, 7:58pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2024-10-30-v10731/2092 "2024-10-30T19:58:20Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![rulesbot](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rulesbot](https://community.emergingthreats.net/u/rulesbot)\ **Post date:** [October 30, 2024, 7:58pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2024-10-30-v10731/2092/1 "2024-10-30T19:58:20Z")
## Summary: 12 new OPEN, 12 new PRO (12 + 0) * * * ## Added rules: ### Open: - 2057150 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (relaxatiyon .cyou) (malware.rules) - 2057151 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (relaxatiyon .cyou in TLS SNI) (malware.rules) - 2057152 - ET EXPLOIT\_KIT TA569 Middleware Domain in DNS Lookup (loopconstruct .com) (exploit\_kit.rules) - 2057153 - ET EXPLOIT\_KIT TA569 Middleware Domain in TLS SNI (loopconstruct .com) (exploit\_kit.rules) - 2057154 - ET WEB\_SPECIFIC\_APPS Cyberpanel upgrademysqlstatus Command Injection Attempt (CVE-2024-51567) (web\_specific\_apps.rules) - 2057155 - ET EXPLOIT\_KIT Balada Domain in DNS Lookup (startservicefounds .com) (exploit\_kit.rules) - 2057156 - ET EXPLOIT\_KIT Balada Domain in TLS SNI (startservicefounds .com) (exploit\_kit.rules) - 2057157 - ET EXPLOIT\_KIT ZPHP Domain in DNS Lookup (omegaarea .site) (exploit\_kit.rules) - 2057158 - ET WEB\_SPECIFIC\_APPS Cyberpanel filemanager Command Injection Attempt (CVE-2024-51568) (web\_specific\_apps.rules) - 2057159 - ET EXPLOIT\_KIT ZPHP Domain in TLS SNI (omegaarea .site) (exploit\_kit.rules) - 2057160 - ET MALWARE Win32/BugSleep CnC Checkin (malware.rules) - 2057161 - ET MALWARE Win32/BugSleep Command Response From C2 (malware.rules) * * * ## Disabled and modified rules: - 2858834 - ETPRO MALWARE TA582 Domain in DNS Lookup (malware.rules)