The newest SNORTⓇ rule update from Cisco Talos is now available.
Tuesday morning's release includes a new rule to protect against the high-profile DarkSide ransomware. The group, also known as DarkMatter, targeted several high-profile companies across the globe this year, including two companies in the U.S. food and agriculture sector.
This new rule detects when the ransomware attempts to make an outbound connection.
Here's a full breakdown of the rest of today's rule update:
|Shared object rules||Modified shared object rules||New rules||Modified rules|