[***] Summary: [***]

11 new OPEN, 18 new PRO (11 + 7). GCleaner, JS WebSkimmer, Kimsuky,
AsyncRAT, Various PHISH.

Thanks: @rootprivilege, @ThingzEye, @Timele9527, @mattdep_

Please share issues, feedback, and requests at
https://feedback.emergingthreats.net/feedback

[+++] Added rules: [+++]

Open:

2033186 - ET TROJAN GCleaner Related Downloader User-Agent (trojan.rules)
2033187 - ET CURRENT_EVENTS Observed Possible Phishing Landing Page
2021-06-24 (current_events.rules)
2033188 - ET TROJAN Observed Malicious SSL Cert (JS WebSkimmer Exfil
Site) (trojan.rules)
2033189 - ET MALWARE Malware Delivery Landing Page via JS Redirect
(2021-06-24) (malware.rules)
2033190 - ET TROJAN Observed Malware Delivery Domain (analyticsnet .top
in TLS SNI) (trojan.rules)
2033191 - ET TROJAN Observed Malware Delivery Landing Page Domain
(bigeront .top in TLS SNI) (trojan.rules)
2033192 - ET TROJAN Kimsuky Related Activity (GET) (trojan.rules)
2033193 - ET TROJAN Kimsuky Related Activity (init) (trojan.rules)
2033194 - ET TROJAN Kimsuky Related Activity (down) (trojan.rules)
2033195 - ET TROJAN Kimsuky Related Activity (ping) (trojan.rules)
2033196 - ET TROJAN Kimsuky Related Activity (GET) (trojan.rules)

Pro:

2849077 - ETPRO TROJAN Observed Malicious SSL Cert (AsyncRAT)
(trojan.rules)
2849078 - ETPRO TROJAN Observed Malicious SSL Cert (AsyncRAT)
(trojan.rules)
2849079 - ETPRO TROJAN Win32/Unk.PPI Loader Install Activity
(trojan.rules)
2849080 - ETPRO TROJAN GCleaner Related Downloader User-Agent
(trojan.rules)
2849081 - ETPRO TROJAN Win32/Unk.PPI Loader Checkin via iplogger
(trojan.rules)
2849082 - ETPRO CURRENT_EVENTS Successful QuickBooks Phish 2021-06-25
(current_events.rules)
2849083 - ETPRO CURRENT_EVENTS Successful Generic Phish 2021-06-25
(current_events.rules)