Views:
Table of Contents
--------------------------
  New Filters - 13
  Modified Filters (logic changes) - 8
  Modified Filters (metadata changes only) - 0
  Removed Filters - 0
New Filters: 

    43370: HTTP: Backdoor.Python.RoseRAT.A Runtime Detection (Connection - Request)
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: October 24, 2023

    43371: HTTP: Backdoor.Python.RoseRAT.A Runtime Detection (Command - Response)
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: October 24, 2023

    43372: HTTP: Trojan.MSIL.0bj3ctivityStealer.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: October 24, 2023

    43373: HTTP: Trojan.Python.Rosegrabber.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: October 24, 2023

    43375: TCP: Backdoor.Shell.Tigaofnidoor.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: October 24, 2023

    43376: HTTP: Backdoor.Python.AphrobyteRAT.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: October 24, 2023

    43383: SMB: Backdoor.Win32.PipeDance.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: October 24, 2023

    43384: HTTP: Backdoor.Win32.CurKeep.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: October 24, 2023

    43385: HTTP: Trojan.MSIL.Gopamesoh.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: October 24, 2023

    43386: HTTP: Backdoor.Shell.Chrorevsh.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - References:
        - Common Vulnerabilities and Exposures: CVE-2023-38831
      - Release Date: October 24, 2023

    43388: HTTP: Trojan-Downloader.VBS.DLOADR.SMYXDIMZ Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: October 24, 2023

    43389: HTTP: Trojan.MSIL.Feritoc.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: October 24, 2023

    43395: TLS: Cobalt Strike Team Server (Pwn3rs Leak Self-signed SSL/TLS Certificate)
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: October 24, 2023

  Modified Filters (logic changes):
    * = Enabled in Default deployments

    * 38900: TLS: Cobalt Strike Team Server (Default Self-signed SSL/TLS Certificate)
      - IPS Version: 3.7.0 and after.
      - TPS Version: 4.0.0 and after.
      - vTPS Version: 4.0.1 and after.
      - Name changed from "38900: TLS: Cobalt Strike (Default Self-signed SSL/TLS Certificate)".
      - Description updated.
      - Detection logic updated.
      - Release Date: February 23, 2021
      - Last Modified Date: October 24, 2023

    * 40007: TLS: Backdoor.MSIL.DcRAT.A Runtime Detection (SSL/TLS Self-signed Certificate)
      - IPS Version: 3.7.0 and after.
      - TPS Version: 4.0.0 and after.
      - vTPS Version: 4.0.1 and after.
      - Name changed from "40007: TLS: Backdoor.MSIL.DcRAT.A (SSL/TLS Self-signed Certificate)".
      - Description updated.
      - Detection logic updated.
      - Vulnerability references updated.
      - Release Date: July 20, 2021
      - Last Modified Date: October 24, 2023

    * 41940: TCP: Trojan.Linux.Zmapgafbot.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Detection logic updated.
      - Release Date: November 15, 2022
      - Last Modified Date: October 24, 2023

    * 41941: HTTP: Trojan.MSIL.ViltYan.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Detection logic updated.
      - Release Date: November 15, 2022
      - Last Modified Date: October 24, 2023

    * 41942: HTTP: Ransomware.MSIL.RedKrypt.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Detection logic updated.
      - Release Date: November 15, 2022
      - Last Modified Date: October 24, 2023

    * 41943: HTTP: Trojan.MSIL.GomorrahStealer.9E50488C Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Detection logic updated.
      - Release Date: November 15, 2022
      - Last Modified Date: October 24, 2023

    * 41960: TCP: Trojan-Downloader.MSIL.Emptexder.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Detection logic updated.
      - Release Date: November 15, 2022
      - Last Modified Date: October 24, 2023

    * 41961: HTTP: Trojan.MSIL.LilithBot.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Detection logic updated.
      - Release Date: November 15, 2022
      - Last Modified Date: October 24, 2023
      
  Modified Filters (metadata changes only): None

  Removed Filters: None