[***] Summary: [***] 5 new Open rules and 8 new Pro (5/3). Itunes Phish, Amtar.KNB, CrossRider.A. Thanks: Kevin Ross and Eoin Miller. [+++] Added rules: [+++] Open: 2018301 - ET MALWARE Win32/Toolbar.CrossRider.A Checkin (malware.rules)
2018302 - ET CURRENT_EVENTS PHISH Generic - Landing Page - HTTrack comment and form (current_events.rules)
2018303 - ET CURRENT_EVENTS PHISH iTunes - Landing Page - Title over non SSL (current_events.rules)
2018304 - ET CURRENT_EVENTS PHISH iTunes - Creds Phished (current_events.rules)
2018305 - ET CURRENT_EVENTS PHISH iTunes - PII Phished (current_events.rules) Pro: 2807873 - ETPRO TROJAN TrojWare.Win32.Amtar.KNB Checkin (trojan.rules)
2807874 - ETPRO TROJAN TrojWare.Win32.Amtar.KNB Checkin 2 (trojan.rules)
2807875 - ETPRO MOBILE_MALWARE Monitor.AndroidOS.PhoneSpy.b Checkin (mobile_malware.rules)
[///] Modified active rules: [///] 2001259 - ET CHAT Yahoo IM file transfer request (chat.rules)
2006406 - ET TROJAN Proxy.Win32.Agent.mx (2) (trojan.rules)
2013293 - ET TROJAN Win32/Glupteba CnC Checkin (trojan.rules)
2807592 - ETPRO MALWARE Trojan.Script.BAT.Agent.db!159552 (malware.rules)
[---] Removed rules: [---] 2805523 - ETPRO MALWARE Win32/Toolbar.CrossRider.A Checkin (malware.rules)
2807764 - ETPRO TROJAN Trojan-Downloader.Win32.Adload.dyjd Checkin (trojan.rules)

 

Date: 
Thursday, March 20, 2014 - 22:00