[***] Summary: [***]

8 new Open signatures, 11 new Pro (8+3). WordPress xmlrpc.php, ABUSE.CH SSL, RIG EK.

Thanks: Kevin Ross.

[+++] Added rules: [+++]

Open:

2018753 - ET MALWARE W32/SearchSuite Install CnC Beacon (malware.rules)
2018754 - ET SCAN Possible WordPress xmlrpc.php wp.getUsersBlogs Flowbit Set (scan.rules)
2018755 - ET SCAN Possible WordPress xmlrpc.php BruteForece in Progress (scan.rules)
2018756 - ET CURRENT_EVENTS XMLDOM Check for Presence Kaspersky AV Observed in RIG EK (current_events.rules)
2018757 - ET CURRENT_EVENTS XMLDOM Check for Presence TrendMicro AV Observed in RIG EK (current_events.rules)
2018758 - ET CURRENT_EVENTS Possible Upatre SSL Cert twitterbacklinks.com (current_events.rules)
2018759 - ET TROJAN Possible Upatre Serial Number in SSL Cert (trojan.rules)
2018760 - ET TROJAN ABUSE.CH SSL Fingerprint Blacklist Malicious SSL certificate detected (Vawtrak MITM) (trojan.rules)

Pro:

2808421 - ETPRO MOBILE_MALWARE Android Dowgin/SMSreg IMSI Leak (mobile_malware.rules)
2808422 - ETPRO TROJAN Win32/Caphaw.A SSL Cert Serial (trojan.rules)
2808423 - ETPRO MOBILE_MALWARE Android/SMSKey.L Checkin (mobile_malware.rules)

[///] Modified active rules: [///]

2018579 - ET TROJAN Backdoor.Win32.Androm.dtrv Checkin (trojan.rules)
2018683 - ET TROJAN Backdoor.Win32.Androm.dtrv Checkin 2 (trojan.rules)
2018749 - ET TROJAN Backdoor.Win32.Androm.dtrv Checkin 3 (trojan.rules)
2804742 - ETPRO MALWARE Adware.AdRotator.G Checkin (malware.rules)
2806150 - ETPRO MOBILE_MALWARE AndroidOS_Adrd.VTD Checkin (mobile_malware.rules)
2806159 - ETPRO MOBILE_MALWARE AndroidOS_Adrd.VTD Checkin 2 (mobile_malware.rules)
2807474 - ETPRO TROJAN Miniduke Checkin 2 (trojan.rules)

[---] Removed rules: [---]

2805318 - ETPRO NETBIOS Microsoft Remote Administration Protocol Windows XP NetServerEnum API Heap Buffer Overflow Flowbit Set (netbios.rules)
2805323 - ETPRO NETBIOS Microsoft Remote Administration Protocol Windows XP NetServerEnum3 API Heap Buffer Overflow SET (netbios.rules)
Date: 
Tuesday, July 22, 2014 - 22:00