[***] Summary: [***]

5 new OPEN, 7 new PRO (5 + 2)

Please share issues, feedback, and requests at
https://feedback.emergingthreats.net/feedback

[+++] Added rules: [+++]

Open:

2039753 - ET INFO Observed File Sharing Service (docdroid .net) in DNS
Lookup (info.rules)
2039754 - ET INFO File Sharing Service Domain (docdroid .net) in TLS SNI
(info.rules)
2039755 - ET PHISHING Successful Roundcube Credential Phish 2022-11-08
(phishing.rules)
2039756 - ET PHISHING Successful Veridian Credit Union Credential Phish
2022-11-08 (phishing.rules)
2039757 - ET MALWARE SocGholish Domain in DNS Lookup (automatic
.tworiversboats .com) (malware.rules)

---------------------------------------

James Emery-Callcott
Security Researcher | ProofPoint Inc | Emerging Threats Team