IPS Signature Database Update

Name ips.sig
Version 2.1.589
StoneOS StoneOS 5.0R4F3.1 or above
Release Date 2024-12-30
New Signature
(113)
Rule ID Rule Name StonesOS Detail
105379 Ransomware Activity: TeslaCrypt/AlphaCrypt Payment DNS Lookup 5.5R5 or above click for more information
338615 Hikvision iSecure Center applyST Remote Code Execution Vulnerability 5.0R4 or above click for more information
105424 Ransomware Activity: Ransomware/Cerber Onion Domain Lookup 5.5R5 or above click for more information
105418 Ransomware Activity: TrumpLocker/VenusLocker .onion Proxy Domain 5.5R5 or above click for more information
332612 Ransomware Activity: Ransomware Locky CnC Beacon 5.5R5 or above click for more information
105396 Ransomware Activity: Ransomware Locky .onion Payment Domain (mphtadhci5mrdlju) 5.5R5 or above click for more information
332633 Trojan Activity: MALWARE Win32/Adware.Bang5mai.BB CnC Activity M2 5.5R5 or above click for more information
105401 Ransomware Activity: DNS Query to Cerber Domain 5.5R5 or above click for more information
105390 Ransomware Activity: Ransomware/Cerber Onion Domain Lookup 5.5R5 or above click for more information
105448 Trojan Activity: Plurox CnC Domain in DNS Lookup 5.5R5 or above click for more information
105427 Trojan Activity: Magecart CnC Domain Observed in DNS Query 5.5R5 or above click for more information
332605 Trojan Activity: StealerNeko CnC Checkin 5.5R5 or above click for more information
105408 Ransomware Activity: Xbash CnC DNS Lookup 5.5R5 or above click for more information
716994 PHP Trojan Detection 5.5R5 or above click for more information
805934 Trojan Activity: ELF/Roboto - Communicating with Hardcoded Peer 5 5.5R5 or above click for more information
332611 Ransomware Activity: PWS.Win32/Reveton.A Checkin 5.5R5 or above click for more information
105399 Ransomware Activity: ABUSE.CH Domain Detected (Locky C2) 5.5R5 or above click for more information
105447 Ransomware Activity: Cerber Domain Observed 5.5R5 or above click for more information
332628 Trojan Activity: Malicious SSL Cert (Magecart) 5.5R5 or above click for more information
105380 Ransomware Activity: Ransomware Locky .onion Payment Domain (5n7y4yihirccftc5) 5.5R5 or above click for more information
......
Updated Signature
(0)
Rule ID Rule Name StonesOS Detail
No update.