Daily Ruleset Update Summary 2017/12/08

[***]            Summary:            [***]

14 new Pro. MSIL/BotError IRC, Dreamsmasher Downloads, Carbanak/FIN7 SSL Cert.

[+++]          Added rules:          [+++]

2828825 - ETPRO CURRENT_EVENTS Observed Malicious SSL Cert 2017-12-07 (MalDoc DL) (current_events.rules)
2828826 - ETPRO CURRENT_EVENTS MalDoc DL Domain 2017-12-07 (myspringhelp .tk in TLS SNI) (current_events.rules)
2828827 - ETPRO TROJAN MSIL/BotError IRC Botnet Joining (trojan.rules)
2828828 - ETPRO TROJAN Carbanak/FIN7 SSL Certificate Detected (trojan.rules)
2828829 - ETPRO TROJAN CoinMiner Known Malicious Stratum Authline (2017-12-08 1) (trojan.rules)
2828830 - ETPRO TROJAN CoinMiner Known Malicious Stratum Authline (2017-12-08 2) (trojan.rules)
2828831 - ETPRO TROJAN CoinMiner Known Malicious Stratum Authline (2017-12-08 3) (trojan.rules)
2828832 - ETPRO TROJAN CoinMiner Known Malicious Stratum Authline (2017-12-08 4) (trojan.rules)
2828833 - ETPRO TROJAN CoinMiner Known Malicious Stratum Authline (2017-12-08 5) (trojan.rules)
2828834 - ETPRO TROJAN CoinMiner Known Malicious Stratum Authline (2017-12-08 6) (trojan.rules)
2828835 - ETPRO TROJAN CoinMiner Known Malicious Stratum Authline (2017-12-08 7) (trojan.rules)
2828836 - ETPRO TROJAN CoinMiner Known Malicious Stratum Authline (2017-12-08 8) (trojan.rules)
2828837 - ETPRO TROJAN Possible Dreamsmasher VBS Download (trojan.rules)
2828838 - ETPRO TROJAN Possible Dreamsmasher PS1 Download (trojan.rules)

[///]     Modified active rules:     [///]

2828837 - ETPRO TROJAN Possible Dreamsmasher VBS Download (trojan.rules)

Date: 
Friday, December 8, 2017 - 00:00