[***] Summary: [***]

8 new Open signatures, 15 new Pro (8+7). Win32.Yakes, Android ScarePakage, Stealzilla.

Thanks: @EKwatcher.

[+++] Added rules: [+++]

Open:

2018767 - ET TROJAN Malicious SSL Cert (KINS C2) (trojan.rules)
2018768 - ET TROJAN Likely Malicious SSL Cert With Script Tags (trojan.rules)
2018769 - ET MOBILE_MALWARE Android ScarePakage checkin (mobile_malware.rules)
2018770 - ET TROJAN Win32.Yakes.fjyq Cookie (trojan.rules)
2018771 - ET TROJAN Win32.Yakes.fjyq POST to C2 (trojan.rules)
2018772 - ET TROJAN Win32.Yakes.fjyq GET to C2 (trojan.rules)
2018773 - ET TROJAN Win32/Pykspa.C Public IP Check (trojan.rules)
2018774 - ET MOBILE_MALWARE Android ScarePakage checkin 2 (mobile_malware.rules)

Pro:

2808424 - ETPRO TROJAN StealZilla credential theft (trojan.rules)
2808425 - ETPRO MOBILE_MALWARE AndroidOS/Denofow.B Checkin (mobile_malware.rules)
2808426 - ETPRO MOBILE_MALWARE Trojan-Clicker.AndroidOS.Winge.b Checkin 3 (mobile_malware.rules)
2808427 - ETPRO TROJAN Win32.Nyxem.M checkin (trojan.rules)
2808428 - ETPRO TROJAN Win32/Rhubot.A Checkin (trojan.rules)
2808429 - ETPRO TROJAN Password Stealer TSPY_WOWSPY.A Checkin (trojan.rules)
2808430 - ETPRO TROJAN Backdoor.Jolob Checkin (trojan.rules)

[///] Modified active rules: [///]

2018522 - ET TROJAN Soraya C2 User-Agent (default) (trojan.rules)
2808053 - ETPRO MOBILE_MALWARE Android/SmsSend.ET Checkin (mobile_malware.rules)
Date: 
Wednesday, July 23, 2014 - 22:00