New Filters: 44187: TCP: Worm.Linux.CatDDoS.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Performance-Optimized (Disabled) - References: - Common Vulnerabilities and Exposures: CVE-2017-17215, CVE-2023-46604 - Release Date: April 30, 2024 44188: HTTP: Trojan-Downloader.VBS.Pteroodonoff.DRFZBV Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Performance-Optimized (Disabled) - Release Date: April 30, 2024 44189: HTTP: Trojan.MSIL.Leomen.00CCB8F9 Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Performance-Optimized (Disabled) - Release Date: April 30, 2024 44200: SMB: Trojan.MSIL.SamecoinSpreader.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Performance-Optimized (Disabled) - Release Date: April 30, 2024 44204: SMTP: Trojan.Python.Atzstealer.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Performance-Optimized (Disabled) - Release Date: April 30, 2024 44205: HTTP: Trojan.MSIL.SharpilRAT.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Performance-Optimized (Disabled) - Release Date: April 30, 2024 44206: TCP: Trojan.Win32.ZusyLogger.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Performance-Optimized (Disabled) - Release Date: April 30, 2024 44207: TCP: Backdoor.Win64.TinyNuke.R03BC0DDB24 Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Performance-Optimized (Disabled) - Release Date: April 30, 2024 44210: HTTP: Backdoor.Linux.LineDancer.A Runtime Detection (POST Ingress) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Performance-Optimized (Disabled) - References: - Common Vulnerabilities and Exposures: CVE-2024-20353, CVE-2024-20359 - Release Date: April 30, 2024 Modified Filters (logic changes): * = Enabled in Default deployments 27839: TCP: Trojan.Win32.Alreay.E Runtime Detection (Request Commands) - IPS Version: 3.7.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "27839: TCP: BKDR_FIMLIS.A (Alreay.E) Checkin". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: April 18, 2017 - Last Modified Date: April 30, 2024 * 28617: TCP: Backdoor.Win64.Meterpreter.X Payload Detection - IPS Version: 3.7.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "28617: TCP: Meterpreter Payload". - Detection logic updated. - Vulnerability references updated. - Release Date: July 04, 2017 - Last Modified Date: April 30, 2024 * 41186: TCP: Trojan.MSIL.Bobik.JFC Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Detection logic updated. - Release Date: April 19, 2022 - Last Modified Date: April 30, 2024 * 43498: SMB: Ransomware.Win64.Megazord.SMTHIBHBC Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Detection logic updated. - Release Date: November 21, 2023 - Last Modified Date: April 30, 2024 Modified Filters (metadata changes only): None Removed Filters: 34282: TCP: Trojan.Win32.Alreay.E Runtime Detection - IPS Version: 3.7.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Release Date: February 13, 2019 - Last Modified Date: October 25, 2022 |