[Emerging-updates] Daily Ruleset Update Summary 01/29/2014

Francis Trudeau ftrudeau at emergingthreats.net
Wed Jan 29 12:47:27 HAST 2014


 [***] Summary: [***]

 9 new Open, 25 new Pro (9/16).  Filezilla Stealer, Solarbot, Asprox,
CookieBomb 2.0.

 Thanks go @MalwareMustDie, Nathan Fowler, Travis Green.

 [+++]          Added rules:          [+++]

 Open:

  2018033 - ET TROJAN Win32.Genome.boescz Checkin (trojan.rules)
  2018034 - ET TROJAN W32/Banker.AALV checkin (trojan.rules)
  2018035 - ET CURRENT_EVENTS StyX Landing Jan 29 2014
(current_events.rules)
  2018036 - ET TROJAN SolarBot Plugin Download Server Response
(trojan.rules)
  2018037 - ET CURRENT_EVENTS CookieBomb 2.0 In Server Response Jan 29 2014
(current_events.rules)
  2018038 - ET TROJAN SolarBot Plugin Download MessageBox (trojan.rules)
  2018039 - ET TROJAN SolarBot Plugin Download ComputerInfo (trojan.rules)
  2018040 - ET TROJAN SolarBot Plugin Download WalletSteal (trojan.rules)
  2018041 - ET CURRENT_EVENTS Current Asprox Spam Campaign
(current_events.rules)

 Pro:

  2807555 - ETPRO TROJAN Trojan.Win32.Inject.gxdp Checkin (trojan.rules)
  2807556 - ETPRO TROJAN Win32/Spy.Banker.ZMS Checkin (trojan.rules)
  2807557 - ETPRO TROJAN Win32.Viking.AR payload attempt (trojan.rules)
  2807558 - ETPRO TROJAN Trojan-PSW.Win32.VB.dks Checkin (trojan.rules)
  2807559 - ETPRO TROJAN Win32/Pincav.B Checkin (trojan.rules)
  2807561 - ETPRO TROJAN Trojan/Win32.Zbot Covert Channel 2 port 53
(trojan.rules)
  2807562 - ETPRO MALWARE Win32.VBNA.b Checkin (malware.rules)
  2807563 - ETPRO TROJAN Win32/Hanove.E (trojan.rules)
  2807564 - ETPRO MALWARE Win32.AdWare.Lollipop.S (malware.rules)
  2807565 - ETPRO TROJAN Win32.Dycler Checkin (trojan.rules)
  2807566 - ETPRO MALWARE Win32.Filezilla.Stealer Checkin (malware.rules)
  2807567 - ETPRO POLICY PJL Printer List Volumes Request (policy.rules)
  2807568 - ETPRO POLICY PJL Printer Directory Listing Request
(policy.rules)
  2807569 - ETPRO POLICY PJL Printer File Download Request (policy.rules)
  2807570 - ETPRO TROJAN Win32/Jukbot.B Checkin (trojan.rules)
  2807571 - ETPRO TROJAN W32/Agent.EW.gen Checkin (trojan.rules)


 [---]         Removed rules:         [---]

  2802046 - ETPRO TROJAN Backdoor.Win32.XDAPR.A Checkin (trojan.rules)
  2807540 - ETPRO TROJAN Net-Worm.Win32.Allaple Checkin (trojan.rules)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.emergingthreats.net/pipermail/emerging-updates/attachments/20140129/78d13ca5/attachment.html>


More information about the Emerging-updates mailing list