Views:
Table of Contents
--------------------------
  New Filters - 9
  Modified Filters (logic changes) - 4
  Modified Filters (metadata changes only) - 0
  Removed Filters - 1
New Filters: 

    44187: TCP: Worm.Linux.CatDDoS.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - References:
        - Common Vulnerabilities and Exposures: CVE-2017-17215, CVE-2023-46604
      - Release Date: April 30, 2024

    44188: HTTP: Trojan-Downloader.VBS.Pteroodonoff.DRFZBV Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: April 30, 2024

    44189: HTTP: Trojan.MSIL.Leomen.00CCB8F9 Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: April 30, 2024

    44200: SMB: Trojan.MSIL.SamecoinSpreader.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: April 30, 2024

    44204: SMTP: Trojan.Python.Atzstealer.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: April 30, 2024

    44205: HTTP: Trojan.MSIL.SharpilRAT.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: April 30, 2024

    44206: TCP: Trojan.Win32.ZusyLogger.A Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: April 30, 2024

    44207: TCP: Backdoor.Win64.TinyNuke.R03BC0DDB24 Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - Release Date: April 30, 2024

    44210: HTTP: Backdoor.Linux.LineDancer.A Runtime Detection (POST Ingress)
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Category: Virus
      - Severity: High
      - Description: This filter is deployed in the Malware Filter Package.
      - Deployments:
        - Deployment: Default (Block / Notify)
        - Deployment: Performance-Optimized (Disabled)
      - References:
        - Common Vulnerabilities and Exposures: CVE-2024-20353, CVE-2024-20359
      - Release Date: April 30, 2024

  Modified Filters (logic changes):
    * = Enabled in Default deployments

    27839: TCP: Trojan.Win32.Alreay.E Runtime Detection (Request Commands)
      - IPS Version: 3.7.0 and after.
      - TPS Version: 4.0.0 and after.
      - vTPS Version: 4.0.1 and after.
      - Name changed from "27839: TCP: BKDR_FIMLIS.A (Alreay.E) Checkin".
      - Description updated.
      - Detection logic updated.
      - Vulnerability references updated.
      - Release Date: April 18, 2017
      - Last Modified Date: April 30, 2024

    * 28617: TCP: Backdoor.Win64.Meterpreter.X Payload Detection
      - IPS Version: 3.7.0 and after.
      - TPS Version: 4.0.0 and after.
      - vTPS Version: 4.0.1 and after.
      - Name changed from "28617: TCP: Meterpreter Payload".
      - Detection logic updated.
      - Vulnerability references updated.
      - Release Date: July 04, 2017
      - Last Modified Date: April 30, 2024

    * 41186: TCP: Trojan.MSIL.Bobik.JFC Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Detection logic updated.
      - Release Date: April 19, 2022
      - Last Modified Date: April 30, 2024

    * 43498: SMB: Ransomware.Win64.Megazord.SMTHIBHBC Runtime Detection
      - IPS Version: 3.9.5 and after.
      - TPS Version: 5.2.2 and after.
      - vTPS Version: 5.2.2 and after.
      - Detection logic updated.
      - Release Date: November 21, 2023
      - Last Modified Date: April 30, 2024

  Modified Filters (metadata changes only): None
      
  Removed Filters:

    34282: TCP: Trojan.Win32.Alreay.E Runtime Detection
      - IPS Version: 3.7.0 and after.
      - TPS Version: 4.0.0 and after.
      - vTPS Version: 4.0.1 and after.
      - Release Date: February 13, 2019
      - Last Modified Date: October 25, 2022