[***] Summary: [***] 9 new Open signatures, 18 new Pro (9 + 9). SpamBanker, SoakSoak, VBS/Cechip.A, Win32/TrojanDownloader. Thanks: Jake Warren and Kevin Ross.
[+++] Added rules: [+++] Open: 2019935 - ET TROJAN AutoIt Downloading EXE - Likely Malicious (trojan.rules)
2019936 - ET CURRENT_EVENTS Win32/Spy.Zbot.ACB SSL Cert Dec 15 2014 (current_events.rules)
2019937 - ET TROJAN SpamBanker message (trojan.rules)
2019938 - ET TROJAN Infostealer.Bancos Sending Stolen info SMTP (trojan.rules)
2019939 - ET CURRENT_EVENTS SoakSoak Malware GET request (current_events.rules)
2019940 - ET CURRENT_EVENTS DNS Query SoakSoak Malware (current_events.rules)
2019941 - ET TROJAN Win32.Bumrat.B Checkin (trojan.rules)
2019942 - ET TROJAN W32/TinyZBot Checkin (Operation Cleaver) (trojan.rules)
2019943 - ET TROJAN ZhCAT.HackTool Operation Cleaver HTTP CnC Beacon (trojan.rules) Pro: 2809334 - ETPRO TROJAN VBS/Cechip.A SSH Banner Checkin (trojan.rules)
2809335 - ETPRO TROJAN Oberon Logger Checkin (trojan.rules)
2809336 - ETPRO TROJAN Win32/Kryptik.CQDL Checkin (trojan.rules)
2809337 - ETPRO TROJAN Win32/TrojanDownloader.Autoit.NTF Checkin (trojan.rules)
2809338 - ETPRO TROJAN Win32.Agobot Checkin (trojan.rules)
2809339 - ETPRO TROJAN Win32/Critroni Tor DNS Proxy lookup (trojan.rules)
2809340 - ETPRO TROJAN Win32/Injector.Autoit.BAO Checkin (trojan.rules)
2809341 - ETPRO TROJAN VBS/Cechip.A SSH Banner Checkin 2 (trojan.rules)
2809342 - ETPRO MOBILE_MALWARE Android/TrojanSMS.Feejar.A Checkin (mobile_malware.rules)
[///] Modified active rules: [///] 2018145 - ET CURRENT_EVENTS Generic HeapSpray Construct (current_events.rules)
2018146 - ET CURRENT_EVENTS Generic HeapSpray Construct (current_events.rules)
2018589 - ET CURRENT_EVENTS Possible ASPROX Download URI Struct June 19 2014 (current_events.rules)
2805646 - ETPRO TROJAN Backdoor.Win32.Bezigate Checkin (trojan.rules)
2807931 - ETPRO MOBILE_MALWARE Android/Badao.A Checkin 2 (mobile_malware.rules)
2808174 - ETPRO TROJAN Win32/Itsproc!gmb DLL Retrieval (trojan.rules)
2808226 - ETPRO TROJAN Trojan/Win32.Zbot Covert Channel port 53 (trojan.rules) [---] Removed rules: [---] 2001524 - ET MALWARE Statblaster Code Download (malware.rules)
2809266 - ETPRO TROJAN W32/TinyZBot Checkin (Operation Cleaver) (trojan.rules)
Date: 
Sunday, December 14, 2014 - 22:00