VRT Rules 2014-08-01
The VRT is aware of the Backoff family of malware which affects point-of-sale products.

The VRT has added a rule to the malware-cnc rule set to provide coverage for emerging threats from this technology.

For information about Snort Subscriber Rulesets available for purchase, please visit the Snort product page.

Change logs

2956

2014-08-01 17:10:55 UTC

Sourcefire VRT Rules Update

Date: 2014-08-01

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack for Snort version 2956.

The format of the file is:

gid:sid <-> Default rule state <-> Message (rule group)

New Rules:


 * 1:31586 <-> ENABLED <-> MALWARE-CNC Win.Trojan.Backoff initial outbound connection (malware-cnc.rules)

Modified Rules:

2961

2014-08-01 17:10:55 UTC

Sourcefire VRT Rules Update

Date: 2014-08-01

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack for Snort version 2961.

The format of the file is:

gid:sid <-> Default rule state <-> Message (rule group)

New Rules:


 * 1:31586 <-> ENABLED <-> MALWARE-CNC Win.Trojan.Backoff initial outbound connection (malware-cnc.rules)

Modified Rules:

2962

2014-08-01 17:10:55 UTC

Sourcefire VRT Rules Update

Date: 2014-08-01

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack for Snort version 2962.

The format of the file is:

gid:sid <-> Default rule state <-> Message (rule group)

New Rules:


 * 1:31586 <-> ENABLED <-> MALWARE-CNC Win.Trojan.Backoff initial outbound connection (malware-cnc.rules)

Modified Rules: