Weekly Detection Rule (YARA and Snort) Information – Week 2, July 2024

Weekly Detection Rule (YARA and Snort) Information – Week 2, July 2024

The following is the information on Yara and Snort rules (week 2, July 2024) collected and shared by the AhnLab TIP service. 0 YARA Rule 11 Snort Rules Detection name Description Source ET TROJAN Poseidon Stealer Data Exfiltration Attempt Detects a packet attempting Poseidon Stealer data exfiltration https://rules.emergingthreatspro.com/open/ ET TROJAN TA427

Status as of July 10, 2024

Status as of July 10, 2024 Hash 149bc1d3aaae0b7145faabe2efd3b5efe 22dda95d913522597f356091ab460f283 37c41f301c53c02095734f9203e2611c9 URL 1http[:]fmktrk[.]live/ 2http[:]ak[.]zougreek[.]com/ 3http[:]ak[.]stoorgel[.]com/ IP...

DELL Family (Client BIOS, Data Protection, Telemetry Dashboard) Security Update Advisory

Overview   DELL has released updates to fix vulnerabilities in their family of products. Users...

KSmserver Product Security Update Advisory (CVE-2024-36041)

Overview An update has been made available to address a vulnerability in the KSmserver product....

JavaScript Moment.js Security Update Advisory (CVE-2022-24785)

Overview An update has been made available to address a vulnerability in Moment.js, JavaScript’s date...

Synology Product Security Update Advisory (CVE-2024-39349)

Overview Synology has released a security update to fix vulnerabilities in its products. Users of...

RedHat Linux OpenSSH Security Advisory (CVE-2024-6409)

Overview A race condition vulnerability has been discovered in the signal handler of sshd, an...

IBM Family (IBM i, IBM MQ, IBM WebSphere Application Server) Security Update Recommendations

Overview An update has been released to address vulnerabilities in IBM products. Users of the...

MS Family July 2024 Routine Security Update Advisory

Overview   Microsoft(https://www.microsoft.com) has released a security update that fixes vulnerabilities in products it has...

Mozilla Products July 2024 1st Security Update Advisory

Overview   An update has been made available to address a vulnerability in the Mozilla...