# Ruleset Update Summary - 2024/12/20 - v10812 **URL:** https://community.emergingthreats.net/t/ruleset-update-summary-2024-12-20-v10812/2282 **Category:** Ruleset Updates **Created:** [December 20, 2024, 9:31pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2024-12-20-v10812/2282 "2024-12-20T21:31:07Z") **Posts on this page:** 1 **Page:** 1
### Author: ![rulesbot](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rulesbot](https://community.emergingthreats.net/u/rulesbot) #### Post date: [December 20, 2024, 9:31pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2024-12-20-v10812/2282/1 "2024-12-20T21:31:07Z")
## Summary: 16 new OPEN, 18 new PRO (16 + 2) * * * ## Added rules: ### Open: - 2058433 - ET PHISHING Microsoft Windows Contacts Syslink Control href Attribute Escape (CVE-2022-44666) (phishing.rules) - 2058434 - ET EXPLOIT\_KIT LandUpdate808 Domain in DNS Lookup (hdtele .com) (exploit\_kit.rules) - 2058435 - ET EXPLOIT\_KIT LandUpdate808 Domain in TLS SNI (hdtele .com) (exploit\_kit.rules) - 2058436 - ET WEB\_SPECIFIC\_APPS Craft CMS Template Path Injection RCE (CVE-2024-56145) (web\_specific\_apps.rules) - 2058437 - ET MALWARE TA453 BellaCiao CnC Domain in DNS Lookup (autoupdate .uk) (malware.rules) - 2058438 - ET MALWARE TA453 BellaCiao CnC Domain in DNS Lookup (systemupdate .info) (malware.rules) - 2058439 - ET MALWARE Observed TA453 BellaCiao Domain (autoupdate .uk) in TLS SNI (malware.rules) - 2058440 - ET MALWARE Observed TA453 BellaCiao Domain (systemupdate .info) in TLS SNI (malware.rules) - 2058441 - ET INFO DYNAMIC\_DNS Query to a \*.toprank21 .com domain (info.rules) - 2058442 - ET INFO DYNAMIC\_DNS HTTP Request to a \*.toprank21 .com domain (info.rules) - 2058443 - ET EXPLOIT\_KIT ZPHP Domain in DNS Lookup (hamptoninnbelton .com) (exploit\_kit.rules) - 2058444 - ET EXPLOIT\_KIT ZPHP Domain in DNS Lookup (odziezrobocza .biz) (exploit\_kit.rules) - 2058445 - ET EXPLOIT\_KIT ZPHP Domain in DNS Lookup (rossarnold .info) (exploit\_kit.rules) - 2058446 - ET EXPLOIT\_KIT ZPHP Domain in TLS SNI (hamptoninnbelton .com) (exploit\_kit.rules) - 2058447 - ET EXPLOIT\_KIT ZPHP Domain in TLS SNI (odziezrobocza .biz) (exploit\_kit.rules) - 2058448 - ET EXPLOIT\_KIT ZPHP Domain in TLS SNI (rossarnold .info) (exploit\_kit.rules) ### Pro: - 2859393 - ETPRO MALWARE TA582 Domain in DNS Lookup (malware.rules) - 2859394 - ETPRO MALWARE TA582 Domain in DNS Lookup (malware.rules)