New Filters:
45310: HTTP: Trojan.VBA.Efarpe.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Category: Virus
- Severity: Critical
- Description: This filter is deployed in the Malware Filter Package.
- Deployment: Not enabled by default in any deployment.
- Release Date: January 21, 2025
45315: HTTP: Ransomware.Win64.HexaLocker.THAOBBE Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Category: Virus
- Severity: High
- Description: This filter is deployed in the Malware Filter Package.
- Deployments:
- Deployment: Default (Block / Notify / Trace)
- Deployment: Evaluation (Permit / Notify / Trace)
- Deployment: Performance-Optimized (Disabled)
- Release Date: January 21, 2025
45316: HTTP: Trojan.MSIL.PrispdStealer.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Category: Virus
- Severity: High
- Description: This filter is deployed in the Malware Filter Package.
- Deployments:
- Deployment: Default (Block / Notify)
- Deployment: Evaluation (Permit / Notify)
- Deployment: Performance-Optimized (Disabled)
- Release Date: January 21, 2025
45317: HTTP: Trojan.Shell.TworkemStealer.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Category: Virus
- Severity: High
- Description: This filter is deployed in the Malware Filter Package.
- Deployments:
- Deployment: Default (Block / Notify)
- Deployment: Evaluation (Permit / Notify)
- Deployment: Performance-Optimized (Disabled)
- Release Date: January 21, 2025
45318: HTTP: Trojan-Downloader.Win32.Satacom.AD Runtime Detection (Download Config)
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Category: Virus
- Severity: High
- Description: This filter is deployed in the Malware Filter Package.
- Deployments:
- Deployment: Default (Block / Notify)
- Deployment: Evaluation (Permit / Notify)
- Deployment: Performance-Optimized (Disabled)
- Release Date: January 21, 2025
45319: HTTP: Trojan-Downloader.Win32.Satacom.AD Runtime Detection (Check-in Request)
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Category: Virus
- Severity: High
- Description: This filter is deployed in the Malware Filter Package.
- Deployments:
- Deployment: Default (Block / Notify)
- Deployment: Evaluation (Permit / Notify)
- Deployment: Performance-Optimized (Disabled)
- Release Date: January 21, 2025
45320: HTTP: Backdoor.Win64.SandCat.69E94105 Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Category: Virus
- Severity: High
- Description: This filter is deployed in the Malware Filter Package.
- Deployments:
- Deployment: Default (Block / Notify)
- Deployment: Evaluation (Permit / Notify)
- Deployment: Performance-Optimized (Disabled)
- Release Date: January 21, 2025
45329: HTTP: Trojan.MSIL.Bobikbot.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Category: Virus
- Severity: High
- Description: This filter is deployed in the Malware Filter Package.
- Deployments:
- Deployment: Default (Block / Notify)
- Deployment: Evaluation (Permit / Notify)
- Deployment: Performance-Optimized (Disabled)
- Release Date: January 21, 2025
Modified Filters (logic changes): None
Modified Filters (metadata changes only):
* = Enabled in Default deployments
* 38506: HTTP: Backdoor.ASP.ASpyDrv.A Runtime Detection (Authentication Request)
- IPS Version: 3.7.0 and after.
- TPS Version: 4.0.0 and after.
- vTPS Version: 4.0.1 and after.
- Name changed from "38506: HTTP: ASpyDrv Webshell Traffic Detected (Authentication Request)".
- Vulnerability references updated.
- Release Date: November 24, 2020
- Last Modified Date: January 21, 2025
* 38507: HTTP: Backdoor.ASP.ASpyDrv.A Runtime Detection (Control Commands)
- IPS Version: 3.7.0 and after.
- TPS Version: 4.0.0 and after.
- vTPS Version: 4.0.1 and after.
- Name changed from "38507: HTTP: ASpyDrv Webshell Traffic Detected (Control Commands)".
- Vulnerability references updated.
- Release Date: November 24, 2020
- Last Modified Date: January 21, 2025
* 38508: HTTP: Backdoor.ASP.RedhatHackerWS.A Runtime Detection (Control Commands)
- IPS Version: 3.7.0 and after.
- TPS Version: 4.0.0 and after.
- vTPS Version: 4.0.1 and after.
- Name changed from "38508: HTTP: RedHat Webshell Traffic Detected (Control Commands)".
- Vulnerability references updated.
- Release Date: November 24, 2020
- Last Modified Date: January 21, 2025
Removed Filters: None
|
