Daily Ruleset Update Summary 2018/08/29

[***]            Summary:            [***]

18 new Pro. Win32/Remcos RAT, KL Banker, FIN7 Griffon, Various Phish, Mobile.

[+++]          Added rules:          [+++]

Pro:

2832369 - ETPRO TROJAN W32.Nymeria.1023 Stealer Checkin (trojan.rules)
2832370 - ETPRO TROJAN Win32/Remcos RAT Checkin 45 (trojan.rules)
2832371 - ETPRO TROJAN KL Banker Check-In (trojan.rules)
2832372 - ETPRO MALWARE Win32/PCMedic PUA Requesting Update (malware.rules)
2832373 - ETPRO CURRENT_EVENTS Successful EC21 Phish 2018-08-29 (current_events.rules)
2832374 - ETPRO INFO HTTP Request for Single Char VBS (info.rules)
2832375 - ETPRO CURRENT_EVENTS Successful Terra Networks Phish M1 2018-08-29 (current_events.rules)
2832376 - ETPRO CURRENT_EVENTS Successful Terra Networks Phish M2 2018-08-29 (current_events.rules)
2832377 - ETPRO CURRENT_EVENTS Likely Evil Wscript.Shell VBS Inbound (current_events.rules)
2832378 - ETPRO CURRENT_EVENTS Successful Personalized Microsoft Account Phish 2018-08-29 (current_events.rules)
2832379 - ETPRO CURRENT_EVENTS Successful Personalized DHL Phish 2018-08-29 (current_events.rules)
2832380 - ETPRO CURRENT_EVENTS Successful Generic Personalized Phish 2018-08-29 (current_events.rules)
2832381 - ETPRO CURRENT_EVENTS Successful Apple Phish 2018-08-29 (current_events.rules)
2832382 - ETPRO TROJAN MSIL/TrojanClicker.Agent.NSA Activity (trojan.rules)
2832383 - ETPRO CURRENT_EVENTS Successful Apple Phish 2018-08-29 (current_events.rules)
2832384 - ETPRO TROJAN FIN7 Griffon SSL/TLS Certificate Observed (trojan.rules)
2832385 - ETPRO MOBILE_MALWARE Possible Android Spy BusyGasper FTP Activity (mobile_malware.rules)
2832386 - ETPRO TROJAN CoinMiner Known Malicious Stratum Authline (2018-08-29 1) (trojan.rules)

[///]     Modified active rules:     [///]

2019202 - ET TROJAN Backdoor.Win32.PcClient.bal CnC (OUTBOUND) 2 (trojan.rules)
2024969 - ET TROJAN OceanLotus System Profiling JavaScript HTTP Request (trojan.rules)
2823937 - ETPRO CURRENT_EVENTS Successful Generic Phish (302) Dec 16 2016 (current_events.rules)
2831962 - ETPRO TROJAN Ursnif Variant CnC Beacon 8 M1 (trojan.rules)
2831963 - ETPRO TROJAN Ursnif Variant CnC Beacon 8 M2 (trojan.rules)
2832147 - ETPRO CURRENT_EVENTS JS/BrushaLoader CnC Checkin M2 (current_events.rules)

Date: 
Wednesday, August 29, 2018 - 00:00