[***] Summary: [***]

1 new OPEN, 5 new PRO (1 + 4). Ursnif, Valyria Maldoc

Proofpoint is looking to hire a Product Manager to oversee the Emerging Threats products group. Interested? Check out the posting here<https://proofpoint.wd5.myworkdayjobs.com/ProofpointCareers/job/Sunnyval…;, and reach out with any questions.

Please share issues, feedback, and requests at https://feedback.emergingthreats.net/feedback.

[+++] Added rules: [+++]

Open:

2034860 - ET WEB_CLIENT Observed JavaScript Event Listener with Clipboard Data (web_client.rules)

Pro:

2850828 - ETPRO TROJAN Observed Malicious SSL Cert (Ursnif CnC) (trojan.rules)

2850829 - ETPRO TROJAN Observed Malicious SSL Cert (Ursnif CnC) (trojan.rules)

2850830 - ETPRO TROJAN Observed Malicious SSL Cert (Ursnif CnC) (trojan.rules)

2850831 - ETPRO TROJAN Valyria Maldoc Activity (GET) (trojan.rules)

[///] Modified active rules: [///]

2034859 - ET TROJAN PurpleFox Backdoor/Rootkit Download Request M1 (trojan.rules)