Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Known IoT Malware Domain rev 2 2019-08-28
snort ET TROJAN Observed DNS Query to Reborn/Ovidiy Stealer CnC Domain rev 2 2019-08-28
snort ET TROJAN TeslaCrypt/AlphaCrypt Payment DNS Lookup rev 2 2019-08-28
snort ET TROJAN Ransomware CrypMIC Payment Onion Domain rev 3 2019-08-28
snort ET TROJAN CDT Credphish/Netwire Campaign DNS Lookup rev 2 2019-08-28
snort ET TROJAN APT32 Komprogo DNS Lookup rev 2 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 16 rev 2 2019-08-28
snort ET TROJAN LYCEUM CnC Domain Observed in DNS Query rev 2 2019-08-28
snort ET DNS Query for a Suspicious *.upas.su domain rev 2 2019-08-28
snort ET TROJAN OSX/WireLurker DNS Query Domain manhuaba.com.cn rev 2 2019-08-28
snort ET TROJAN Lazarus Decafett DNS Lookup 1 rev 2 2019-08-28
snort ET MOBILE_MALWARE Android/Kemoge DNS Lookup rev 2 2019-08-28
snort ET TROJAN Ponmocup Post Infection DNS Lookup messagewild rev 2 2019-08-28
snort ET TROJAN DNS Query for Known Chewbacca CnC Server rev 3 2019-08-28
snort ET DNS DNS Lookup for localhost.DOMAIN.TLD rev 4 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 42 rev 2 2019-08-28
snort ET CURRENT_EVENTS BankAustria Phishing Domain Nov 03 2017 rev 4 2019-08-28
snort ET TROJAN XCodeGhost DNS Lookup rev 2 2019-08-28
snort ET POLICY Dropbox DNS Lookup - Possible Offsite File Backup in Use rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup adobeincorp.com rev 3 2019-08-28
snort ET TROJAN CDT Credphish/Netwire Campaign DNS Lookup rev 2 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 15 rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 24 rev 2 2019-08-28
snort ET TROJAN DNS Request for Zaletelly CnC Domain rev 2 2019-08-28
snort ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup rev 2 2019-08-28
snort ET TROJAN APT28 DealersChoice DNS Lookup rev 3 2019-08-28
snort ET TROJAN Possible WannaCry DNS Lookup 1 rev 4 2019-08-28
snort ET TROJAN Possible WannaCry DNS Lookup 4 rev 4 2019-08-28
snort ET TROJAN Mirai Botnet Domain Observed rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup microsof-update.com rev 3 2019-08-28
snort ET TROJAN CryptON/Nemesis/X3M Ransomware Onion Domain rev 3 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 47 rev 2 2019-08-28
snort ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 16 rev 2 2019-08-28
snort ET TROJAN Suckfly/Nidiran Backdoor DNS Lookup rev 2 2019-08-28
snort ET TROJAN Ransomware Locky Possible Payment Page rev 2 2019-08-28
snort ET TROJAN Cryptolocker .onion Proxy Domain rev 3 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 8 rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 27 rev 2 2019-08-28
snort ET TROJAN ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 3 2019-08-28
snort ET WEB_SERVER DNS Query for Suspicious e5b57288.com Domain - Anuna Checkin - Compromised PHP Site rev 3 2019-08-28