[***] Summary: [***] 9 new Open signatures, 10 new Pro (9 + 1). CVE-2014-6332, CryptoWall 2.0, AlienSpy RAT. Thanks: Jake Warren, Kevin Ross and @kafeine. [+++] Added rules: [+++] 2019732 - ET WEB_CLIENT Possible Internet Explorer VBscript failure to handle error case information disclosure CVE-2014-6332 Percent Hex Encode (web_client.rules)
2019733 - ET EXPLOIT Possible Internet Explorer VBscript failure to handle error case information disclosure CVE-2014-6332 Common Function Name (exploit.rules)
2019734 - ET EXPLOIT Possible Internet Explorer VBscript failure to handle error case information disclosure CVE-2014-6332 Common Construct (exploit.rules)
2019735 - ET EXPLOIT Possible Internet Explorer VBscript failure to handle error case information disclosure CVE-2014-6332 Common Construct Hex Encode (exploit.rules)
2019736 - ET TROJAN Likely CryptoWall 2.0 .onion Proxy domain lookup (trojan.rules)
2019738 - ET TROJAN AlienSpy RAT Checkin Set (trojan.rules)
2019739 - ET TROJAN W32/AlienSpy RAT Checkin (trojan.rules)
2019740 - ET TROJAN OSX/AlienSpy RAT Checkin (trojan.rules)
2019741 - ET TROJAN W32/Matsnu.Backdoor CnC Beacon (trojan.rules) Pro: 2809214 - ETPRO TROJAN Win32/Chanitor.A .onion Proxy domain lookup (trojan.rules)
Date: 
Monday, November 17, 2014 - 22:00