[Emerging-updates] Daily Ruleset Update Summary (Weekend Update) 11/23/2014

Will Metcalf wmetcalf at emergingthreatspro.com
Mon Nov 24 01:42:42 EST 2014


 [***]          Summary:          [***]

 5 New rules. Various Fixes. Archie, CoinVault, etc. Tks James Lay, @rmkml

 [+++]          Added rules:          [+++]

  2019773 - ET CURRENT_EVENTS Possible Internet Explorer CVE-2014-6332
Common Construct b64 1 (Observed in Archie EK) (current_events.rules)
  2019774 - ET CURRENT_EVENTS Possible Internet Explorer CVE-2014-6332
Common Construct b64 2 (Observed in Archie EK) (current_events.rules)
  2019775 - ET CURRENT_EVENTS Possible Internet Explorer CVE-2014-6332
Common Construct b64 3 (Observed in Archie EK) (current_events.rules)
  2019776 - ET TROJAN CoinVault POST M1 (trojan.rules)
  2019777 - ET TROJAN CoinVault POST M2 (trojan.rules)


 [///]     Modified active rules:     [///]

  2018925 - ET CURRENT_EVENTS Turla/SPL EK Java Exploit Requested - /spl/
(current_events.rules)
  2019655 - ET CURRENT_EVENTS Fiesta EK Landing Nov 05 2014
(current_events.rules)
  2019768 - ET CURRENT_EVENTS Archie EK T2 PD Struct Nov 20 2014
(current_events.rules)
  2019769 - ET CURRENT_EVENTS Archie EK T2 Landing Struct Nov 20 2014
(current_events.rules)
  2019770 - ET CURRENT_EVENTS Archie EK T2 SWF Exploit Struct Nov 20 2014
(current_events.rules)
  2019765 - ET CURRENT_EVENTS DRIVEBY Nuclear EK SWF (current_events.rules)

 [---]         Removed rules:         [---]

  2016706 - ET CURRENT_EVENTS SofosFO/NeoSploit possible second stage
landing page (1) (current_events.rules)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.emergingthreats.net/pipermail/emerging-updates/attachments/20141124/6034bc27/attachment.html>


More information about the Emerging-updates mailing list