# Ruleset Update Summary - 2026/10/19 - v11314

**URL:** <https://community.emergingthreats.net/t/ruleset-update-summary-2026-10-19-v11314/3484>\
**Category:** Ruleset Updates\
**Created:** [October 19, 2026, 8:44pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2026-10-19-v11314/3484 "2026-10-19T20:44:03Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![rulesbot](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rulesbot](https://community.emergingthreats.net/u/rulesbot)\
**Post date:** [October 19, 2026, 8:44pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2026-10-19-v11314/3484/1 "2026-10-19T20:44:03Z")

</div>

## Summary:

9 new OPEN, 38 new PRO (9 + 29)

* * *

## Added rules:

### Open:

- 2072507 - ET EXPLOIT\_KIT ClickFix Domain in DNS Lookup (treboarkez .lol) (exploit\_kit.rules)
- 2072508 - ET EXPLOIT\_KIT ClickFix Domain in TLS SNI (treboarkez .lol) (exploit\_kit.rules)
- 2072509 - ET WEB\_SPECIFIC\_APPS Plex Media Server Plex2Shell Unauthenticated Server-Side Request Forgery (CVE-2026-96652) (web\_specific\_apps.rules)
- 2072510 - ET WEB\_SPECIFIC\_APPS Plex Media Server Plex2Shell URL Injection via searchOne (CVE-2026-96654) (web\_specific\_apps.rules)
- 2072511 - ET WEB\_SPECIFIC\_APPS Plex Media Server Plex2Shell Authenticated Arbitrary File Write (CVE-2026-96655) M1 (web\_specific\_apps.rules)
- 2072512 - ET WEB\_SPECIFIC\_APPS Plex Media Server Plex2Shell Authenticated Arbitrary File Write (CVE-2026-96655) M2 (web\_specific\_apps.rules)
- 2072513 - ET WEB\_SPECIFIC\_APPS Plex Media Server Plex2Shell Authenticated Server-Side Request Forgery (CVE-2026-96655) (web\_specific\_apps.rules)
- 2072515 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (brightfutuxres .tech) (malware.rules)
- 2072516 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (brightfutuxres .tech) in TLS SNI (malware.rules)

### Pro:

- 2868857 - ETPRO MALWARE ClickFix CnC Checkin Activity (malware.rules)
- 2868858 - ETPRO MALWARE ClickFix Filter Activity (malware.rules)
- 2868859 - ETPRO MALWARE TA584 Win32/XWorm V2 CnC Command - PING Outbound (malware.rules)
- 2868860 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - PING Outbound (malware.rules)
- 2868861 - ETPRO MALWARE TA584 Win32/XWorm CnC Command - Ping Inbound (malware.rules)
- 2868862 - ETPRO MALWARE TA584 Win32/XWorm V2 CnC Command - RD- Inbound (malware.rules)
- 2868863 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - sendPlugin Outbound (malware.rules)
- 2868864 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - Informations Outbound (malware.rules)
- 2868865 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - GetInformations Inbound (malware.rules)
- 2868866 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - PCShutdown Inbound (malware.rules)
- 2868867 - ETPRO MALWARE TA584 Win32/XWorm V2 CnC Command - PING Outbound (malware.rules)
- 2868868 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - PING Outbound (malware.rules)
- 2868869 - ETPRO MALWARE TA584 Win32/XWorm CnC Command - Ping Inbound (malware.rules)
- 2868870 - ETPRO MALWARE TA584 Win32/XWorm V2 CnC Command - RD- Inbound (malware.rules)
- 2868871 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - sendPlugin Outbound (malware.rules)
- 2868872 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - Informations Outbound (malware.rules)
- 2868873 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - GetInformations Inbound (malware.rules)
- 2868874 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - PCShutdown Inbound (malware.rules)
- 2868875 - ETPRO MALWARE Malicious Win32/NetSupport Rat CnC Checkin (malware.rules)
- 2868876 - ETPRO MALWARE LunexStealer Remote Conifg Request (malware.rules)
- 2868877 - ETPRO MALWARE LunexStealer CnC Config Inbound (malware.rules)
- 2868878 - ETPRO MALWARE LunexStealer Bot Registration (malware.rules)
- 2868879 - ETPRO MALWARE LunexStealer CnC Bot Registration Status (malware.rules)
- 2868880 - ETPRO MALWARE LunexStealer Passwords Exfil (malware.rules)
- 2868881 - ETPRO MALWARE LunexStealer Tokens Exfil (malware.rules)
- 2868882 - ETPRO MALWARE LunexStealer Wallets Exfil (malware.rules)
- 2868883 - ETPRO MALWARE LunexStealer Victim Task Polling (malware.rules)
- 2868884 - ETPRO MALWARE LunexStealer CnC Task Polling Response (malware.rules)
- 2868885 - ETPRO MALWARE LunexStealer Victim Task Acknowledgment (malware.rules)