Daily Ruleset Update Summary 2018/04/18

[***]            Summary:            [***]

1 new Open, 21 new Pro (1 + 20). Win32/Tiggre!rfn, W32/ExtenBro.EL, Various Phishing, Various Mobile.

[+++]          Added rules:          [+++]

Open:

2025514 - ET CURRENT_EVENTS Mail Verification Phishing Landing 2018-04-18 (current_events.rules)

Pro:

2830452 - ETPRO MOBILE_MALWARE Trojan-Banker.AndroidOS.Asacub.a Checkin 315 (mobile_malware.rules)
2830453 - ETPRO MOBILE_MALWARE Trojan-Banker.AndroidOS.Asacub.a Checkin 316 (mobile_malware.rules)
2830454 - ETPRO MOBILE_MALWARE Trojan-Banker.AndroidOS.Asacub.a Checkin 317 (mobile_malware.rules)
2830455 - ETPRO POLICY Observed SSL Cert for IP Lookup Domain (2ip .ru) (policy.rules)
2830456 - ETPRO TROJAN Remcos RAT Checkin 15 (trojan.rules)
2830457 - ETPRO CURRENT_EVENTS Observed MalDoc DL 2018-04-18 Domain (p3073 .typo3server .info in TLS SNI) (current_events.rules)
2830458 - ETPRO TROJAN Win32/Tiggre!rfn CnC Checkin (trojan.rules)
2830459 - ETPRO TROJAN njRAT/Bladabindi Variant CnC Checkin (Hassan) (trojan.rules)
2830460 - ETPRO POLICY FaraDesk Remote Support SSL/TLS Certificate Observed (policy.rules)
2830461 - ETPRO TROJAN Observed RevCode RAT CnC Domain (williamsleo .wm01 .to in TLS SNI) (trojan.rules)
2830462 - ETPRO TROJAN Gh0st Variant CnC Beacon (trojan.rules)
2830463 - ETPRO MOBILE_MALWARE Android.Trojan.SLocker.AEG Checkin (mobile_malware.rules)
2830464 - ETPRO CURRENT_EVENTS Successful Adobe Sendnow Phish 2018-04-18 (current_events.rules)
2830465 - ETPRO CURRENT_EVENTS Successful Itaucard Phish 2018-04-18 (current_events.rules)
2830466 - ETPRO CURRENT_EVENTS Successful Paypal Phish 2018-04-18 (current_events.rules)
2830467 - ETPRO CURRENT_EVENTS Successful Paypal Phish 2018-04-18 (current_events.rules)
2830468 - ETPRO MOBILE_MALWARE Trojan-Banker.AndroidOS.Asacub.a Checkin 318 (mobile_malware.rules)
2830469 - ETPRO MOBILE_MALWARE Android/Triada.DL.Trojan Variant CnC Checkin (mobile_malware.rules)
2830470 - ETPRO CURRENT_EVENTS Successful TD Bank Phish 2018-04-18 (current_events.rules)
2830471 - ETPRO TROJAN W32/ExtenBro.EL Checkin (trojan.rules)

[///]     Modified active rules:     [///]

2814728 - ETPRO TROJAN Bmdoor Variant CnC Beacon 2 (trojan.rules)
2828314 - ETPRO TROJAN Magniber Ransomware Checkin 1 (trojan.rules)

Date: 
Wednesday, April 18, 2018 - 00:00