New Filters:
42823: HTTP: Worm.Linux.Mirai.EV Runtime Detection (Zyxel Infection)
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Category: Virus
- Severity: High
- Description: This filter is deployed in the Malware Filter Package.
- Deployments:
- Deployment: Default (Block / Notify)
- Deployment: Performance-Optimized (Disabled)
- References:
- Common Vulnerabilities and Exposures: CVE-2023-26801, CVE-2023-26802, CVE-2023-27076
- Release Date: June 13, 2023
42824: HTTP: Worm.Linux.Mirai.EV Runtime Detection (LB-Link Infection)
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Category: Virus
- Severity: High
- Description: This filter is deployed in the Malware Filter Package.
- Deployments:
- Deployment: Default (Block / Notify)
- Deployment: Performance-Optimized (Disabled)
- References:
- Common Vulnerabilities and Exposures: CVE-2023-26801, CVE-2023-26802, CVE-2023-27076
- Release Date: June 13, 2023
42825: HTTP: Worm.Linux.Mirai.EV Runtime Detection (Tenda Infection)
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Category: Virus
- Severity: High
- Description: This filter is deployed in the Malware Filter Package.
- Deployments:
- Deployment: Default (Block / Notify)
- Deployment: Performance-Optimized (Disabled)
- References:
- Common Vulnerabilities and Exposures: CVE-2023-26801, CVE-2023-26802, CVE-2023-27076
- Release Date: June 13, 2023
42826: HTTP: Worm.Linux.Mirai.EV Runtime Detection (Netlog Infection)
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Category: Virus
- Severity: High
- Description: This filter is deployed in the Malware Filter Package.
- Deployments:
- Deployment: Default (Block / Notify)
- Deployment: Performance-Optimized (Disabled)
- References:
- Common Vulnerabilities and Exposures: CVE-2023-26801, CVE-2023-26802, CVE-2023-27076
- Release Date: June 13, 2023
42827: HTTP: Backdoor.Win32.TinyNote.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Category: Virus
- Severity: High
- Description: This filter is deployed in the Malware Filter Package.
- Deployment: Not enabled by default in any deployment.
- Release Date: June 13, 2023
42830: TCP: Backdoor.Win32.Lobshot.R002C0DC723 Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Category: Virus
- Severity: High
- Description: This filter is deployed in the Malware Filter Package.
- Deployments:
- Deployment: Default (Block / Notify)
- Deployment: Performance-Optimized (Disabled)
- Release Date: June 13, 2023
42840: TCP: Trojan.Win64.FRP.YXDEY Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Category: Virus
- Severity: High
- Description: This filter is deployed in the Malware Filter Package.
- Deployment: Not enabled by default in any deployment.
- Release Date: June 13, 2023
42841: HTTP: Trojan.MSIL.Rimjule.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Category: Virus
- Severity: High
- Description: This filter is deployed in the Malware Filter Package.
- Deployments:
- Deployment: Default (Block / Notify)
- Deployment: Performance-Optimized (Disabled)
- Release Date: June 13, 2023
Modified Filters (logic changes):
* = Enabled in Default deployments
* 41051: HTTP: Cobalt Strike Malleable C&C Traffic Request (Stack Overflow GET Profile)
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Description updated.
- Detection logic updated.
- Release Date: May 10, 2022
- Last Modified Date: June 13, 2023
Modified Filters (metadata changes only):
* = Enabled in Default deployments
* 42376: HTTP: Backdoor.Win32.Newspenguin.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: February 21, 2023
- Last Modified Date: June 13, 2023
* 42436: HTTP: Trojan.Win32.Stealc.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: March 07, 2023
- Last Modified Date: June 13, 2023
* 42467: SMTP: Trojan.MSIL.Xkadenbot.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: March 07, 2023
- Last Modified Date: June 13, 2023
* 42468: TCP: Trojan.MSIL.Revrtobia.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: March 07, 2023
- Last Modified Date: June 13, 2023
42469: TCP: Trojan.Shell.EyeSpy.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: March 07, 2023
- Last Modified Date: June 13, 2023
* 42470: HTTP: Trojan-Downloader.Shell.SnipstLoader.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: March 07, 2023
- Last Modified Date: June 13, 2023
* 42494: HTTP: Backdoor.Python.ColourblindRat.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: March 14, 2023
- Last Modified Date: June 13, 2023
* 42502: HTTP: Worm.Python.Zuoratexp.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: March 14, 2023
- Last Modified Date: June 13, 2023
* 42511: HTTP: Trojan.Shell.Kimsuky.O Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: March 21, 2023
- Last Modified Date: June 13, 2023
* 42512: TCP: Backdoor.Win32.MQsTTang.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: March 21, 2023
- Last Modified Date: June 13, 2023
* 42513: HTTP: Trojan-Downloader.Shell.Powsflo.FL Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: March 21, 2023
- Last Modified Date: June 13, 2023
* 42514: HTTP: Trojan.Python.Conanylog.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: March 21, 2023
- Last Modified Date: June 13, 2023
* 42536: HTTP: Trojan.AutoIT.Mispadu.CH Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: March 28, 2023
- Last Modified Date: June 13, 2023
* 42550: HTTP: Trojan-Downloader.Win32.Zuoshecod.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: March 28, 2023
- Last Modified Date: June 13, 2023
42578: TCP: Worm.Linux.Bladeforebot.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: April 04, 2023
- Last Modified Date: June 13, 2023
* 42601: TCP: Trojan.Win64.ImBetter.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Vulnerability references updated.
- Release Date: April 11, 2023
- Last Modified Date: June 13, 2023
* 42635: UDP: Backdoor.Win64.SomniRecord.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: April 25, 2023
- Last Modified Date: June 13, 2023
* 42658: HTTP: Trojan.Win32.DevOpt.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: May 02, 2023
- Last Modified Date: June 13, 2023
42734: HTTP: Trojan-Downloader.MSIL.Drokbk.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Vulnerability references updated.
- Release Date: May 23, 2023
- Last Modified Date: June 13, 2023
* 42742: HTTP: Trojan.VBA.RooftopMelt.A Runtime Detection
- IPS Version: 3.9.5 and after.
- TPS Version: 5.2.2 and after.
- vTPS Version: 5.2.2 and after.
- Miscellaneous modification.
- Release Date: May 23, 2023
- Last Modified Date: June 13, 2023
Removed Filters: None
|