Ruleset Update Summary - 2026/09/04 - v11275

Ruleset Updates
1

Summary:

7 new OPEN, 7 new PRO (7 + 0)

Added rules:

Open:

  • 2071925 - ET MALWARE TA569 Gholoader CnC Domain in DNS Lookup (st-dl .documentsupportservices .com) (malware.rules)
  • 2071926 - ET MALWARE TA569 Gholoader CnC Domain in TLS SNI (st-dl .documentsupportservices .com) (malware.rules)
  • 2071927 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (cdn14 .quran .edu .eu .org) (exploit_kit.rules)
  • 2071928 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (cdn14 .quran .edu .eu .org) (exploit_kit.rules)
  • 2071929 - ET ATTACK_RESPONSE Observed Portuguese JS Dropper Inbound M2 (attack_response.rules)
  • 2071930 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (breakdecisiveexpandw .fun) (malware.rules)
  • 2071931 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (breakdecisiveexpandw .fun) in TLS SNI (malware.rules)