Daily Ruleset Update Summary 2017/06/28

[***] Summary: [***]

2 new Open signatures, 22 new Pro (2 + 20).  VARIOUS PHISHING, Android Asacub.

Thanks:  @MalwrHunterTeam

[+++]          Added rules:          [+++]

2024431 - ET CURRENT_EVENTS Watering Hole Redirect Inject Jun 28 2017 (current_events.rules)
2024432 - ET INFO Suspicious HTML Hex Obfuscated Title - Possible Phishing Landing Jun 28 2017 (info.rules)
2024433 - ET TROJAN Observed Malicious SSL Cert (HiddenTear Variant CnC) (trojan.rules)

Pro:

2826907 - ETPRO MOBILE_MALWARE Trojan-Spy.AndroidOS.SmsThief.fe SMS/Contact Exfil via SMTP 2 (mobile_malware.rules)
2826908 - ETPRO CURRENT_EVENTS Successful Postfinance Phish Jun 28 2017 (current_events.rules)
2826909 - ETPRO CURRENT_EVENTS Successful Banque Populaire Phish Jun 27 2017 (current_events.rules)
2826910 - ETPRO CURRENT_EVENTS Successful Google Drive Phish M1 Jun 28 2017 (current_events.rules)
2826911 - ETPRO CURRENT_EVENTS Successful Google Drive Phish M2 Jun 28 2017 (current_events.rules)
2826912 - ETPRO TROJAN Executioner Ransomware Reporting Infection via SMTP M2 (trojan.rules)
2826913 - ETPRO CURRENT_EVENTS Successful Sparkasse Phish Jun 28 2017 (current_events.rules)
2826914 - ETPRO INFO Form Submitted to Form2pay.com - Possible Successful Phish Jun 28 2017 (info.rules)
2826915 - ETPRO CURRENT_EVENTS Paypal Phishing Landing Jun 28 2017 (current_events.rules)
2826916 - ETPRO CURRENT_EVENTS Successful Paypal Phish Jun 28 2017 (current_events.rules)
2826917 - ETPRO CURRENT_EVENTS Facebook Account Verification Phishing Landing Jun 28 2017 (current_events.rules)
2826918 - ETPRO MOBILE_MALWARE Trojan-Banker.AndroidOS.Asacub.a Checkin 162 (mobile_malware.rules)
2826919 - ETPRO CURRENT_EVENTS Successful Personalized Outlook Phish Jun 28 2017 (current_events.rules)
2826920 - ETPRO MOBILE_MALWARE Android.Trojan.Agent.LN Checkin (mobile_malware.rules)
2826921 - ETPRO CURRENT_EVENTS Successful BRED (FR) Phish Jun 28 2017 (current_events.rules)
2826922 - ETPRO CURRENT_EVENTS Successful IRS Phish Jun 28 2017 (current_events.rules)
2826923 - ETPRO CURRENT_EVENTS Successful Apple Phish Jun 28 2017 (current_events.rules)
2826924 - ETPRO CURRENT_EVENTS Successful Vanguard Phish Jun 28 2017 (current_events.rules)
2826925 - ETPRO CURRENT_EVENTS MalDoc Retrieving Payload June 26 2017 (current_events.rules)
2826926 - ETPRO TROJAN MSIL/Unk.BrowserModifier CnC Checkin (trojan.rules)

[///]     Modified active rules:     [///]

2826905 - ETPRO CURRENT_EVENTS Capital One Phishing Landing Jun 28 2017 (current_events.rules)
2826906 - ETPRO CURRENT_EVENTS Successful Capital One Phish Jun 28 2017 (current_events.rules)

[---]  Disabled and modified rules:  [---]

2826816 - ETPRO TROJAN MSIL/Injector.SKQ InfoStealer CnC Checkin (trojan.rules)

Date: 
Wednesday, June 28, 2017 - 00:00