New Filters: 42823: HTTP: Worm.Linux.Mirai.EV Runtime Detection (Zyxel Infection) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Performance-Optimized (Disabled) - References: - Common Vulnerabilities and Exposures: CVE-2023-26801, CVE-2023-26802, CVE-2023-27076 - Release Date: June 13, 2023 42824: HTTP: Worm.Linux.Mirai.EV Runtime Detection (LB-Link Infection) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Performance-Optimized (Disabled) - References: - Common Vulnerabilities and Exposures: CVE-2023-26801, CVE-2023-26802, CVE-2023-27076 - Release Date: June 13, 2023 42825: HTTP: Worm.Linux.Mirai.EV Runtime Detection (Tenda Infection) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Performance-Optimized (Disabled) - References: - Common Vulnerabilities and Exposures: CVE-2023-26801, CVE-2023-26802, CVE-2023-27076 - Release Date: June 13, 2023 42826: HTTP: Worm.Linux.Mirai.EV Runtime Detection (Netlog Infection) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Performance-Optimized (Disabled) - References: - Common Vulnerabilities and Exposures: CVE-2023-26801, CVE-2023-26802, CVE-2023-27076 - Release Date: June 13, 2023 42827: HTTP: Backdoor.Win32.TinyNote.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployment: Not enabled by default in any deployment. - Release Date: June 13, 2023 42830: TCP: Backdoor.Win32.Lobshot.R002C0DC723 Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Performance-Optimized (Disabled) - Release Date: June 13, 2023 42840: TCP: Trojan.Win64.FRP.YXDEY Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployment: Not enabled by default in any deployment. - Release Date: June 13, 2023 42841: HTTP: Trojan.MSIL.Rimjule.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Category: Virus - Severity: High - Description: This filter is deployed in the Malware Filter Package. - Deployments: - Deployment: Default (Block / Notify) - Deployment: Performance-Optimized (Disabled) - Release Date: June 13, 2023 Modified Filters (logic changes): * = Enabled in Default deployments * 41051: HTTP: Cobalt Strike Malleable C&C Traffic Request (Stack Overflow GET Profile) - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Description updated. - Detection logic updated. - Release Date: May 10, 2022 - Last Modified Date: June 13, 2023 Modified Filters (metadata changes only): * = Enabled in Default deployments * 42376: HTTP: Backdoor.Win32.Newspenguin.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: February 21, 2023 - Last Modified Date: June 13, 2023 * 42436: HTTP: Trojan.Win32.Stealc.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: March 07, 2023 - Last Modified Date: June 13, 2023 * 42467: SMTP: Trojan.MSIL.Xkadenbot.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: March 07, 2023 - Last Modified Date: June 13, 2023 * 42468: TCP: Trojan.MSIL.Revrtobia.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: March 07, 2023 - Last Modified Date: June 13, 2023 42469: TCP: Trojan.Shell.EyeSpy.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: March 07, 2023 - Last Modified Date: June 13, 2023 * 42470: HTTP: Trojan-Downloader.Shell.SnipstLoader.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: March 07, 2023 - Last Modified Date: June 13, 2023 * 42494: HTTP: Backdoor.Python.ColourblindRat.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: March 14, 2023 - Last Modified Date: June 13, 2023 * 42502: HTTP: Worm.Python.Zuoratexp.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: March 14, 2023 - Last Modified Date: June 13, 2023 * 42511: HTTP: Trojan.Shell.Kimsuky.O Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: March 21, 2023 - Last Modified Date: June 13, 2023 * 42512: TCP: Backdoor.Win32.MQsTTang.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: March 21, 2023 - Last Modified Date: June 13, 2023 * 42513: HTTP: Trojan-Downloader.Shell.Powsflo.FL Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: March 21, 2023 - Last Modified Date: June 13, 2023 * 42514: HTTP: Trojan.Python.Conanylog.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: March 21, 2023 - Last Modified Date: June 13, 2023 * 42536: HTTP: Trojan.AutoIT.Mispadu.CH Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: March 28, 2023 - Last Modified Date: June 13, 2023 * 42550: HTTP: Trojan-Downloader.Win32.Zuoshecod.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: March 28, 2023 - Last Modified Date: June 13, 2023 42578: TCP: Worm.Linux.Bladeforebot.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: April 04, 2023 - Last Modified Date: June 13, 2023 * 42601: TCP: Trojan.Win64.ImBetter.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Vulnerability references updated. - Release Date: April 11, 2023 - Last Modified Date: June 13, 2023 * 42635: UDP: Backdoor.Win64.SomniRecord.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: April 25, 2023 - Last Modified Date: June 13, 2023 * 42658: HTTP: Trojan.Win32.DevOpt.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: May 02, 2023 - Last Modified Date: June 13, 2023 42734: HTTP: Trojan-Downloader.MSIL.Drokbk.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Vulnerability references updated. - Release Date: May 23, 2023 - Last Modified Date: June 13, 2023 * 42742: HTTP: Trojan.VBA.RooftopMelt.A Runtime Detection - IPS Version: 3.9.5 and after. - TPS Version: 5.2.2 and after. - vTPS Version: 5.2.2 and after. - Miscellaneous modification. - Release Date: May 23, 2023 - Last Modified Date: June 13, 2023 Removed Filters: None |