Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE AZORult v3.3 Server Response M3 rev 1 2019-12-12
snort ET TROJAN Possible APT38 CnC Domain Observed in DNS Query rev 2 2019-12-11
snort ET TROJAN Possible APT38 CnC Domain Observed in DNS Query rev 2 2019-12-11
snort ET MALWARE Observed DNS Query to OSX/Bundalore Domain rev 2 2019-12-11
snort ET MALWARE OSX/Bundalore Loader Activity rev 2 2019-12-11
suricata ET ADWARE_PUP Observed DNS Query to OSX/Bundalore Domain rev 1 2019-12-11
snort ET CURRENT_EVENTS Successful Generic Email Account Phish 2019-12-10 rev 2 2019-12-10
snort ET TROJAN Win32/Snatch Ransomware - Encryption Started rev 2 2019-12-10
suricata ET MALWARE JsOutProx CnC Activity - Outbound rev 2 2019-12-10
snort ET TROJAN Magecart CnC Domain Observed in DNS Query rev 2 2019-12-09
snort ET MALWARE PrivaZer Checkin rev 2 2019-12-06
snort ET MALWARE Win32/GameHack.COG Variant CnC Activity rev 2 2019-12-06
suricata ET ADWARE_PUP Win32/GameHack.COG Variant CnC Activity rev 1 2019-12-06
suricata ET ADWARE_PUP PrivaZer Checkin rev 1 2019-12-06
snort ET TROJAN MedusaHTTP Variant CnC Checkin M2 rev 2 2019-12-05
snort ET TROJAN Tick Group Payload - Submitting Encrypted Data to CnC rev 2 2019-12-02
snort ET TROJAN Tick Group Payload - Reporting Error to CnC rev 2 2019-12-02
snort ET TROJAN VNCStartServer USR Variant CnC Beacon rev 3 2019-12-02
suricata ET MALWARE VNCStartServer USR Variant CnC Beacon rev 3 2019-12-02
snort ET TROJAN Legion Loader Activity Observed rev 2 2019-11-27
snort ET MALWARE Win32/Adware.Bang5mai.BB CnC Activity M1 rev 2 2019-11-27
snort ET MALWARE Win32/Adware.Bang5mai.BB CnC Activity M2 rev 2 2019-11-27
snort ET WEB_CLIENT Possible Magecart Credit Card Information JS Script rev 2 2019-11-27
snort ET TROJAN Magecart CnC Domain Observed in DNS Query rev 2 2019-11-27
suricata ET ADWARE_PUP Win32/Adware.Bang5mai.BB CnC Activity M2 rev 2 2019-11-27
suricata ET ADWARE_PUP Win32/Adware.Bang5mai.BB CnC Activity M1 rev 1 2019-11-27
snort ET TROJAN Win32/Beapy CnC Domain in DNS Lookup rev 2 2019-11-26
snort ET TROJAN Win32/Beapy CnC Domain in DNS Lookup rev 2 2019-11-26
snort ET TROJAN Cyborg Ransomware - Downloading Desktop Background rev 2 2019-11-25
snort ET TROJAN ELF/Roboto - Communicating with Hardcoded Peer 1 rev 2 2019-11-21
snort ET TROJAN ELF/Roboto - Communicating with Hardcoded Peer 5 rev 2 2019-11-21
snort ET TROJAN ELF/Roboto - Communicating with Hardcoded Peer 3 rev 2 2019-11-21
snort ET TROJAN ELF/Roboto - Communicating with Hardcoded Peer 4 rev 2 2019-11-21
snort ET TROJAN ELF/Roboto - Communicating with Hardcoded Peer 2 rev 2 2019-11-21
snort ET TROJAN MuddyWater Payload - CnC Checkin rev 2 2019-11-21
suricata ET MALWARE ELF/Roboto - Communicating with Hardcoded Peer 4 rev 1 2019-11-21
suricata ET MALWARE ELF/Roboto - Communicating with Hardcoded Peer 5 rev 1 2019-11-21
suricata ET MALWARE ELF/Roboto - Communicating with Hardcoded Peer 3 rev 1 2019-11-21
suricata ET MALWARE ELF/Roboto - Communicating with Hardcoded Peer 2 rev 1 2019-11-21
suricata ET MALWARE ELF/Roboto - Communicating with Hardcoded Peer 1 rev 1 2019-11-21