[Emerging-Sigs] Emerging Threats Daily Signature Changes

Thu Apr 17 17:00:10 EDT 2008

[***] Results from Oinkmaster started Thu Apr 17 17:00:10 2008 [***]

[+++]          Added rules:          [+++]

 2008139 - ET CURRENT_EVENTS RhiFrem Trojan Activity - cmd (bleeding.rules)
 2008140 - ET CURRENT_EVENTS RhiFrem Trojan Activity - log (bleeding.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-sid-msg.map (2):
        2008139 || ET CURRENT_EVENTS RhiFrem Trojan Activity - cmd || url,www.castlecops.com/U_S_Courts_phish792683.html
        2008140 || ET CURRENT_EVENTS RhiFrem Trojan Activity - log || url,www.castlecops.com/U_S_Courts_phish792683.html

     -> Added to bleeding-sid-msg.map.txt (2):
        2008139 || ET CURRENT_EVENTS RhiFrem Trojan Activity - cmd || url,www.castlecops.com/U_S_Courts_phish792683.html
        2008140 || ET CURRENT_EVENTS RhiFrem Trojan Activity - log || url,www.castlecops.com/U_S_Courts_phish792683.html

     -> Added to bleeding.rules (1):
        #by Don Jackson of Secureworks. RE: US courts related phishes