Refined Malware Quarantine and Optimized IP Filtering in BitNinja 3.13.5

The latest 3.13.5 release of BitNinja introduces essential updates across several key modules to improve overall security performance and system stability. Key enhancements include a more efficient malware quarantine system, improved scraper detection from 404 errors, and fixes to configuration issues in IP filtering and WAF protection. These updates aim to make server defense more reliable and responsive, ensuring that threats are handled effectively.

BitNinja 3.13.5

Malware Detection

The signature generation process has been refactored, improving accuracy and performance during malware scans. This helps detect a wider range of malware signatures more reliably.

Two issues were also addressed: one that caused malware scans to hang occasionally, and another that previously prevented certain malware from being quarantined. With these fixes, the scanning and remediation process becomes more predictable and effective.

SenseLog

The CatchScrapersWith404 rule has been improved to better identify bots or scrapers generating repeated 404 errors. This increases detection accuracy and helps proactively mitigate potential scraping or enumeration attempts.

IpFilter

Fixed an issue where disabling the greylist option could unexpectedly increase system load. This improvement restores expected performance behavior and allows for more efficient configuration tuning.

WafPro

An issue affecting retrieval of the maximum DF size was resolved. This ensures more consistent handling of HTTP requests by the Web Application Firewall in environments where large payloads need to be evaluated.

Dispatcher

A security vulnerability reported by Wazuh was resolved in the Dispatcher module, strengthening the agent’s internal communication integrity.

ProcessAnalysis

The process analysis module has been further improved for deeper and more accurate inspection of running processes—supporting better automated behavior analysis.

Changelog:

• SenseLog

Improved the CatchScrapersWith404 rule.

MalwareDetection

• Refactored the signature generation process.

• Fixed an issue where scans could occasionally hang.

• Fixed an issue that prevented malware from being quarantined.

IpFilter

• Fixed an issue where disabling the greylist option caused increased load.

WafPro

• Fixed an issue where getting the maximum DF size failed.

Dispatcher

• Fixed a security vulnerability reported by Wazuh.

ProcessAnalysis

• Improved the process analysis module.

To ensure you’re running the latest version, check your update channel settings in the BitNinja Console using RAU. If you have specific configurations or applications preventing automatic updates, please refer to our documentation for instructions on manual updates and RAU configuration.

If you'd like to read more about previous releases, check the Changelog anytime.

Alternatively, if you would like to see your feature request show up here, don't forget to cast your vote.