Update third-party rules as of 2025-09-30 (#1146)

octo-sts[bot] · github-actions[bot] · web-flow · commit 19739bdfb68b · 2025-09-30T07:17:58.000-05:00
Co-authored-by: Update third-party rules &lt;41898282+github-actions[bot]@users.noreply.github.com&gt;
diff --git a/third_party/yara/bartblaze/RELEASE b/third_party/yara/bartblaze/RELEASE
@@ -1 +1 @@
-9c6d7c50ddb9f3a51d246a0d21d35cf7b769d4a9
+749b051626ad44ac2a677f98ec61b3fc76eaa161
diff --git a/third_party/yara/bartblaze/ransomware/XiaoBa.yar b/third_party/yara/bartblaze/ransomware/XiaoBa.yar
@@ -3,10 +3,10 @@ rule XiaoBa
     meta:
         id = "7HQbk7TyDS3DhwWOktZe9t"
         fingerprint = "d41a019709801bbbc4284b27fd7f582ed1db624415cb28b88a7cdf5b0c3331b2"
-        version = "1.0"
+        version = "2.0"
         creation_date = "2019-09-01"
         first_imported = "2021-12-30"
-        last_modified = "2021-12-30"
+        last_modified = "2025-09-29"
         status = "RELEASED"
         sharing = "TLP:WHITE"
         source = "BARTBLAZE"
@@ -24,5 +24,5 @@ rule XiaoBa
         $ = "I am very sorry that all your files have been encrypted" ascii wide
 
     condition:
-        any of them
-}
+        2 of them
+}
