Cisco Talos released the latest rule update for SNORTⓇ this morning.
Thursday's rule update includes protection against several malware families. One rule prevents the Bandidos malware, an upgraded version of Bandook, from making an outbound connection. Security researchers recently found Bandidos being used in spying campaigns against targets in Latin America.
Here's a full breakdown of this release:
| Shared object rules | Modified shared object rules | New rules | Modified rules |
|---|---|---|---|
| 1 | 0 | 5 | 0 |
There were no changes made to the snort.conf in this release.
Talos' rule release:
Talos has added and modified multiple rules in the malware-cnc and server-webapp rule sets to provide coverage for emerging threats from these technologies.
You can subscribe to Talos' newest rule detection functionality for as low as $29 a year with a personal account. Be sure and see our business pricing as well here. The Snort 3 release is also here after years of development and improvements. Upgrade here.