Thursday's rule update includes protection against several
malware families. One rule prevents the Bandidos malware, an
upgraded version of Bandook, from making an outbound connection.
Security researchers recently found Bandidos being used in spying campaigns against targets in Latin
America.
There were no changes made
to the snort.conf in this
release.
Talos' rule release:
Talos has added and modified multiple rules in the malware-cnc and
server-webapp rule sets to provide coverage for emerging threats
from these technologies.
You can subscribe to Talos' newest rule detection
functionality for as low as $29 a year with a personal account. Be
sure and see our business pricing as well here. The Snort 3 release is also here after years of
development and improvements. Upgrade here.