From beaa8e20cbe20f4c94a5933ce9352549dae156ad Mon Sep 17 00:00:00 2001
From: ElonJunior <ElonWang2@outlook.com>
Date: Sat, 10 Aug 2024 09:51:43 +0800
Subject: [PATCH] iran malware

---
 README.md                      |  2 +-
 resouces/kr_builtin_ruleset.py | 20 ++++++++++++--------
 2 files changed, 13 insertions(+), 9 deletions(-)

diff --git a/README.md b/README.md
index 49ca8e62..92a77448 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,7 @@
 
 ## Thanks to
 - [meta-rules-dat](https://github.com/MetaCubeX/meta-rules-dat/raw/sing/geo)
-- [Chocolate4U-Iran](https://github.com/Chocolate4U/Iran-sing-box-rules/tree/rule-set?tab=readme-ov-file)
+- [Chocolate4U-Iran](https://github.com/Chocolate4U/Iran-sing-box-rules/tree/rule-set?tab=readme-ov-file) 、[v2ray/xray client configuration](https://github.com/Chocolate4U/Iran-v2ray-rules?tab=readme-ov-file#computer-usage)
 - [ACL4SSR](https://github.com/ACL4SSR/ACL4SSR)
 - Thank you for suggested modifying the recommend rules:
     - @VPNBrooklynSup (🧑🏻‍💻 پشتیبانی بروکلین «دریچه»)
diff --git a/resouces/kr_builtin_ruleset.py b/resouces/kr_builtin_ruleset.py
index 3d211afe..a6fe34d3 100644
--- a/resouces/kr_builtin_ruleset.py
+++ b/resouces/kr_builtin_ruleset.py
@@ -20,7 +20,7 @@
     - category-ads-all 包含了常见的广告域名，以及广告提供商的域名
 
 - emoji
-    - 🌏 🚀
+    - 🌏 🚀 🛑
 """
 
 import sys
@@ -225,14 +225,18 @@ OPT_RULESET_GROUPS['ir']['🛑 Adblock'] = {
     ],
 }
 OPT_RULESET_GROUPS['ir']['🛑 malware'] = {
-    'default': 'off',
+    'default': 'on',
     'outbound': 'block_out',
-    'rules': ['geosite:malware'],
-}
-OPT_RULESET_GROUPS['ir']['📢 phishing'] = {
-    'default': 'off',
-    'outbound': 'direct_out',
-    'rules': ['geoip:phishing', 'geosite:phishing'],
+    'rules': [
+        # 恶意软件
+        'geosite:malware',
+        'geoip:malware'
+        # 钓鱼网站
+        'geoip:phishing',
+        'geosite:phishing',
+        # 后台挖矿
+        'geosite:cryptominers',
+    ],
 }
 OPT_RULESET_GROUPS['ir']['☁️ parspack'] = {
     'default': 'on',