ET-3404 |
Ruleset Update Summary - 2026/07/29 - v11245 |
|
forum-post |
1 |
10 |
|
|
|
TF-MAL-asp.tunna |
Malware family: Tunna |
|
Tunna |
1 |
10 |
|
|
|
TF-MAL-php.wso |
Malware family: WSO |
|
WSO |
1 |
10 |
|
|
|
ET-3402 |
Ruleset Update Summary - 2026/07/28 - v11244 |
|
forum-post |
1 |
10 |
|
|
|
VT-gemhunters.co |
VirusTotal: gemhunters.co |
medium |
ioc |
1 |
10 |
|
|
|
ET-3400 |
Ruleset Update Summary - 2026/07/27 - v11242 |
|
forum-post |
1 |
10 |
|
|
|
TF-MAL-elf.spamtorte |
Malware family: Spamtorte |
|
Spamtorte |
1 |
10 |
|
|
|
TF-MAL-osx.lador |
Malware family: Lador |
|
Lador |
1 |
10 |
|
|
|
TF-MAL-apk.catelites |
Malware family: Catelites |
|
Catelites |
1 |
10 |
|
|
|
ET-3389 |
Ruleset Update Summary - 2026/07/17 - v11236 |
|
forum-post |
1 |
10 |
|
|
|
ET-3391 |
Ruleset Update Summary - 2026/07/20 - v11237 |
|
forum-post |
1 |
10 |
|
|
|
ET-3392 |
Ruleset Update Summary - 2026/07/21 - v11238 |
|
forum-post |
1 |
10 |
|
|
|
ET-3393 |
False positive 2035595 - zgRAT / PureRAT confusion |
|
forum-post |
1 |
10 |
|
|
|
ET-3394 |
Ruleset Update Summary - 2026/07/22 - v11239 |
|
forum-post |
1 |
10 |
|
|
|
ET-3395 |
Ruleset Update Summary - 2026/07/23 - v11240 |
|
forum-post |
1 |
10 |
|
|
|
ET-3396 |
Ruleset Update Summary - 2026/07/24 - v11241 |
|
forum-post |
1 |
10 |
|
|
|
TF-MAL-osx.applejeus |
Malware family: AppleJeus |
|
AppleJeus |
1 |
10 |
|
|
|
TF-MAL-apk.unidentified_008 |
Malware family: Unidentified APK 008 |
|
Unidentified APK 008 |
1 |
10 |
|
|
|
TF-MAL-js.turla_ff_ext |
Malware family: HTML5 Encoding |
|
HTML5 Encoding |
1 |
10 |
|
|
|
TF-MAL-elf.unidentified_002 |
Malware family: Unidentified Linux 002 |
|
Unidentified Linux 002 |
1 |
10 |
|
|
|
TF-MAL-js.zimreaper |
Malware family: ZimReaper |
|
ZimReaper |
1 |
8 |
|
|
|
TF-1811875 |
Cobalt Strike: ip:port combination that is used for botnet Command&control (C&C) 8.218.224.15:8080 |
high |
Cobalt Strike |
2 |
5 |
|
|
|
VT-56dffc636aa06a4a6c000f8cc1692b5294f35fb890be81461e5ddcfd678e |
VirusTotal: 56dffc636aa06a4a6c000f8cc1692b5294f35fb890be81461e5ddcfd678e0b42 |
high |
ioc |
1 |
10 |
|
|
|
TF-MAL-apk.raxir |
Malware family: Raxir |
|
Raxir |
1 |
10 |
|
|
|
TF-MAL-ps1.legion_relay |
Malware family: LegionRelay |
|
LegionRelay |
1 |
8 |
|
|
|
TF-MAL-apk.phonespy |
Malware family: PhoneSpy |
|
PhoneSpy |
1 |
10 |
|
|
|
TF-MAL-apk.dracarys |
Malware family: Dracarys |
|
Dracarys |
1 |
10 |
|
|
|
TF-MAL-apk.dhcspy |
Malware family: DHCSpy |
|
DHCSpy |
1 |
10 |
|
|
|
TF-MAL-apk.dvmap |
Malware family: Dvmap |
|
Dvmap |
1 |
10 |
|
|
|
TF-MAL-apk.charger |
Malware family: Charger |
|
Charger |
1 |
10 |
|
|
|
TF-MAL-apk.ratmilad |
Malware family: RatMilad |
|
RatMilad |
1 |
10 |
|
|
|
TF-MAL-py.modelorat |
Malware family: ModeloRAT |
|
ModeloRAT |
1 |
10 |
|
|
|
TF-MAL-osx.macsync |
Malware family: MacSync |
|
MacSync |
1 |
10 |
|
|
|
TF-MAL-elf.jackskid |
Malware family: Jackskid |
|
Jackskid |
1 |
10 |
|
|
|
TF-1811905 |
VShell: ip:port combination that is used for botnet Command&control (C&C) 107.172.255.93:8084 |
high |
VShell |
2 |
4 |
|
|
|
TF-1811897 |
ClearFake: Domain name that delivers a malware payload ohqvz201.unseen-zorenka.digital |
high |
ClearFake |
2 |
10 |
|
|
|
TF-MAL-js.offode |
Malware family: OFFODE |
|
OFFODE |
1 |
10 |
|
|
|
MB-f762a8a7d3925b8034a327d92b1156dbe6efb2a88cb26a79da0b92645b5a124a |
Mirai: pmips |
high |
Mirai |
1 |
10 |
|
|
|
TF-1811896 |
ClearFake: Domain name that delivers a malware payload zghyyith.unp2idvalk.digital |
high |
ClearFake |
2 |
10 |
|
|
|
TF-MAL-apk.unidentified_009 |
Malware family: Unidentified APK 009 (Chrome Recon) |
|
Unidentified APK 009 (Chrome Recon) |
1 |
10 |
|
|
|
TF-1811914 |
Unknown malware: URL that is used for botnet Command&control (C&C) https://virusblocker.it.com/12156011215601 |
low |
Unknown malware |
3 |
10 |
|
|
|
TF-MAL-apk.wyrmspy |
Malware family: WyrmSpy |
|
WyrmSpy |
1 |
10 |
|
|
|
TF-1811907 |
Kimwolf: ip:port combination that is used for botnet Command&control (C&C) 209.38.46.40:25001 |
high |
Kimwolf |
2 |
5 |
|
|
|
TF-MAL-elf.caja |
Malware family: Caja |
|
Caja |
1 |
10 |
|
|
|
TF-MAL-elf.backdoor_irc16 |
Malware family: Irc16 |
|
Irc16 |
1 |
10 |
|
|
|
TF-MAL-elf.echobot |
Malware family: Echobot |
|
Echobot |
1 |
10 |
|
|
|
TF-MAL-elf.drive_switch |
Malware family: DriveSwitch |
|
DriveSwitch |
1 |
10 |
|
|
|
TF-MAL-elf.brute_entry |
Malware family: BruteEntry |
|
BruteEntry |
1 |
10 |
|
|
|
TF-MAL-elf.ddoor |
Malware family: ddoor |
|
ddoor |
1 |
10 |
|
|
|
TF-MAL-elf.evilgnome |
Malware family: EvilGnome |
|
EvilGnome |
1 |
10 |
|
|
|