[Emerging-updates] Daily Ruleset Update Summary 10/24/2013

Francis Trudeau ftrudeau at emergingthreats.net
Fri Oct 25 06:26:32 HADT 2013


Sorry for late notice everyone.  The sigs actually went out  early evening
(10/24) yesterday but I forgot to tell anyone about it.

Thanks for your patience.

Fran


On Fri, Oct 25, 2013 at 9:16 AM, Francis Trudeau <
ftrudeau at emergingthreats.net> wrote:

>  [***] Summary: [***]
>
> 6 Pro rules, 2 open, 2 modified.  FakeAV, Netgear hole, Banos, Pinit.
>
>  [+++]          Added rules:          [+++]
>
> Pro:
>   2807146 - ETPRO TROJAN Worm.Win32.Pinit.ri Checkin 1 (trojan.rules)
>   2807147 - ETPRO TROJAN Worm.Win32.Pinit.ri Checkin 2 (trojan.rules)
>   2807148 - ETPRO TROJAN Win32/Spy.Bancos.OGH Checkin (trojan.rules)
>   2807149 - ETPRO TROJAN Dropper.Generic3.AZFS Checkin (trojan.rules)
>   2807150 - ETPRO MALWARE Security Cleaner Pro FakeAV Checkin
> (malware.rules)
>   2807151 - ETPRO TROJAN DDoS.Win32/Nitol.D Checkin 2 (trojan.rules)
> Open:
>   2017631 - ET CURRENT_EVENTS Netgear WNDR4700 Auth Bypass
> (current_events.rules)
>   2017632 - ET CURRENT_EVENTS Netgear WNDR3700 Auth Bypass
> (current_events.rules)
>
>  [///]     Modified active rules:     [///]
>
>   2013224 - ET POLICY Suspicious User-Agent Containing .exe (policy.rules)
>   2017473 - ET CURRENT_EVENTS Possible CoolEK Variant Payload Download Sep
> 16 2013 (current_events.rules)
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.emergingthreats.net/pipermail/emerging-updates/attachments/20131025/0f904ad0/attachment.html>


More information about the Emerging-updates mailing list