Ruleset Update Summary - 2026/10/30 - v11324

Ruleset Updates
1

Summary:

4 new OPEN, 12 new PRO (4 + 8)

Added rules:

Open:

  • 2072608 - ET MALWARE RedHive CnC Victim Registration M1 (malware.rules)
  • 2072609 - ET MALWARE RedHive CnC Screenshot Exfil (malware.rules)
  • 2072610 - ET MALWARE RedHive CnC Victim Registration M2 (malware.rules)
  • 2072611 - ET INFO Outbound Static Websocket Key Nonce Used, Not Randomly Generated (info.rules)

Pro:

  • 2868997 - ETPRO MALWARE Hermes MaaS Victim Client Report (malware.rules)
  • 2868998 - ETPRO MALWARE Hermes MaaS CnC Client Report Response (malware.rules)
  • 2868999 - ETPRO MALWARE Hermes MaaS CnC Manifest Request (malware.rules)
  • 2869000 - ETPRO MALWARE Hermes MaaS CnC Manifest Response (malware.rules)
  • 2869001 - ETPRO MALWARE Hermes MaaS GET Binary Chunk (malware.rules)
  • 2869002 - ETPRO MALWARE Hermes MaaS Custom HTTP Header Observed Inbound (malware.rules)
  • 2869003 - ETPRO MALWARE Hermes MaaS Custom HTTP Header Observed Outbound (malware.rules)
  • 2869004 - ETPRO MALWARE Hermes Victim Retrieve Modules Request (malware.rules)