[***]            Summary:            [***]

16 new Pro. Async RAT, AutoIt RAT, Various SSL/TLS Certs.

[+++]          Added rules:          [+++]

2833892 - ETPRO MOBILE_MALWARE Android.Riskware.HiddenAds.BC Phone Info Exfil (mobile_malware.rules)
2833893 - ETPRO MOBILE_MALWARE Android.Riskware.HiddenAds.BC Heartbeat (mobile_malware.rules)
2833894 - ETPRO MOBILE_MALWARE Android/AdDisplay.Tapcore.C Phone Info Exfil (mobile_malware.rules)
2833895 - ETPRO MOBILE_MALWARE Trojan-Banker.AndroidOS.Agent.em / BankBot CnC Beacon (mobile_malware.rules)
2833896 - ETPRO TROJAN MSIL/Mintluks.A Checkin (trojan.rules)
2833897 - ETPRO TROJAN W32.DriverLnk Checkin (trojan.rules)
2833898 - ETPRO TROJAN CoinMiner Known Malicious Stratum Authline (2018-12-12 1) (trojan.rules)
2833899 - ETPRO POLICY MadExcept Sending Bug Report (policy.rules)
2833900 - ETPRO TROJAN MSIL.NombreRAT Checkin (trojan.rules)
2833901 - ETPRO TROJAN NanoCore RAT CnC 24 (trojan.rules)
2833902 - ETPRO TROJAN Async RAT CnC Keep-Alive (trojan.rules)
2833903 - ETPRO TROJAN AutoIt RAT CnC Checkin (trojan.rules)
2833904 - ETPRO TROJAN AutoIt RAT CnC Keep-Alive (Outbound) (trojan.rules)
2833905 - ETPRO TROJAN Observed Malicious SSL Cert (More_eggs CnC) (trojan.rules)
2833906 - ETPRO TROJAN Observed Malicious SSL Cert (IcedID CnC) (trojan.rules)
2833907 - ETPRO TROJAN Observed Malicious SSL Cert (Ursnif CnC) (trojan.rules)

[///]     Modified active rules:     [///]

2026673 - ET TROJAN IcedID WebSocket Request (trojan.rules)
2026720 - ET TROJAN Win32/DanaBot Harvesting Email Addresses 2 (trojan.rules)
2026721 - ET TROJAN Win32/DanaBot Harvesting Email Addresses 1 (trojan.rules)
2832224 - ETPRO MOBILE_MALWARE Android/TrojanDropper.Shedun.X Checkin (mobile_malware.rules)
2833873 - ETPRO TROJAN WebBrowserPassView Exfil via HTTP (trojan.rules)

Date: 
Tuesday, December 11, 2018 - 22:00