Daily Ruleset Update Summary 02/15/2013
[***] Summary: [***] 10 new Open rules 11 new Pro rules (10/1) CoolEK, More Sinkhole sigs, Vundo, DNS Amplification attack updates etc. 2016414 CoolEK update 2016415 – 2016416 PHP code in User-Agent....
View ArticleDaily Ruleset Update Summary 02/18/2013
[***] Summary: [***] 3 new Open rules 6 new Pro rules (3/3). CoolEK, Zbot.ivgw, a couple of fixes, etc. 2016425 Win32.Zbot.ivgw 2016426-2016427 CoolEK updates 2806031-2806033 Daily Pro TROJAN...
View ArticleDaily Ruleset Update Summary 02/19/2013
[***] Summary: [***] 24 new Open and/or moved from Pro rules all related to the Mandiant APT report. More coming today. A couple of new Pro sigs. SofosFO/Vulnerable Java UA sigs updated. If you haven’t...
View ArticleDaily Ruleset Update Summary 02/21/2013
[***] Summary: [***] 41 new Open rules. 50 new Pro rules (41/9). More APT1/CommentCrew Sigs, CoolEK updates, CBeplay etc. I highly recommend reading the Mandiant report which can be found here...
View ArticleWeekly Ruleset Update Summary 2/22/2013
Quite a week, some great sigs added and modified. The Mandiant report of course was the big news. We’re very glad to say the majority of malware connected in the report was already covered in ET Open...
View ArticleDaily Ruleset Update Summary 02/25/2013
[***] Summary: [***] 14 new Open rules. 18 new Pro rules (14/4). 2016494,2016502-2016505 Java Serialized Applet Activity seen used in CVE-2013-0431. 2016495,2016506 g01pack Jar updates. 2016496 Gememo...
View ArticleEMERGING THREATS EXPANDS SUITE OF MALWARE INTELLIGENCE SOLUTIONS WITH NEW...
IQRisk Rep Query Delivers Multi-Level, Robust Threat Intelligence to Meet the Needs of Small Businesses and Large Enterprises SAN FRANCISCO (RSA OATH Pavilion Booth #839) – Feb. 26, 2013 – Emerging...
View ArticleDaily Ruleset Update Summary 02/26/2013
[***] Summary: [***] 4 new Open rules. 13 new Pro rules (4/9). W32/Caphaw, Serialized Applet, Zbot Varient, CoolEK/Brobot updates etc. [+++] Added rules: [+++] Open: 2016507 – ET TROJAN W32/Caphaw...
View ArticleDaily Ruleset Update Summary 03/03/2013
[***] Summary: [***] 3 new Open rules. 11 new Pro rules (3/8) McRAT traffic from Java 0-day, etc. [+++] Added rules: [+++] Open: 2016511 – ET CURRENT_EVENTS Successful Compromise svchost.jpg Beacon –...
View ArticleWeekly Ruleset Update Summary 4/1/2013
Slightly delayed post for last week’s ruleset summary. 18 new Open rules, 13 new Pro Subscriber rules, for 31 new and 28 modified. Already have a full queue for this week, enjoy! [+++] Added...
View ArticleDaily Ruleset Update Summary 03/04/2013
[***] Summary: [***] 20 new Open rules 27 new Pro rules (20/7). BHEK, CrimeBoss Sakura, Meta sprayHeap, Gememo, Asprox, Vulnerable Java sigs updated, etc. 2016514 CrimeBoss Jar 2016515 Gimemo Locker...
View ArticleDaily Ruleset Update Summary 03/05/2013
[***] Summary: [***] 7 new Open rules. 16 new Pro rules (7/9). Generic Detection: Executable download with minimal headers, Jar download with non-jar extension. Both of these appear to have fairly...
View ArticleDaily Ruleset Update Summary 03/06/2013
[***] Summary: [***] 6 new Open rules. 13 new Pro rules (6/7). Detection updates/fixes. 2016544,2016547 BH/CoolEK Detection updates. 2016546 W32/Eorezo.Adware 2016548 W32/Ponik.Downloader 2016549...
View ArticleDaily Ruleset Update Summary 03/07/2013
[***] Summary: [***] 7 new Open rules. 10 new Pro rules (7/3). NeutrinoEK, Urausy, Trustezeb, FiestaEK, etc. 2016551 Neutrino EK 2016552 W32/Trustezeb.C 2016553 Win32/Urausy.C Replaces 2016548...
View ArticleDaily Ruleset Update Summary 03/08/2013
[***] Summary: [***] 2 new Open rules. 5 new Pro rules (2/3). CoolEK, Crimboss, Non .jar JAR FP fix on pipe-lined requests. [+++] Added rules: [+++] Open: 2016558 – ET CURRENT_EVENTS Possible CrimeBoss...
View ArticleWeekly Ruleset Update Summary 3/8/2013
40 new Open rules, 34 new Pro rules for 74 new total! Big week, lots of bad getting knocked down! Have a great wekend [+++] Added rules: [+++] 2016511 – ET CURRENT_EVENTS Successful Compromise...
View ArticleDaily Ruleset Update Summary 03/11/2013
[***] Summary: [***] 3 new Open rules. 12 new Pro rules (3/9). A couple of important fixes/tweaks. GonDad and Neutrino EK’s, Asprox, etc. 2016560 GonDad EK Plugin Detect 2016561 Asprox Thx Kevin Ross...
View ArticleMarch 2013 Microsoft Tuesday Coverage
Bulletin CVE Title Notes ET Pro Coverage MS13-021 2013-0087 Internet Explorer OnResize Use After Free Vulnerability Exploit Code Likely 2806107 MS13-021 2013-0088 Internet Explorer saveHistory Use...
View ArticleDaily Ruleset Update Summary 03/12/2013
[***] Summary: [***] 2 new Open rules. 18 new Pro rules. (2/16). MS Tuesday Coverage http://www.emergingthreats.net/2013/03/12/march-2013-microsoft-tuesday-coverage/ , BHEK 16-hex/q.php variant,...
View ArticleDaily Ruleset Update Summary 03/13/2013
[***] Summary: [+++] 12 new rules. SNET/Sibhost EK’s, Urausy,APT_NGO_wuaclt, W32/LetsGo.APT, WebShells, etc. 2016566 SNET Exploit Kit 2016567 Urausy Detection Update 2016568 W32/LetsGo.APT...
View Article
/fit-in/580x348/filters:format(webp)/english-betterindia/media/media_files/2026/09/17/balaghat-4-2026-09-17-19-01-31.png)
