Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN CryptON/Nemesis/X3M Ransomware Onion Domain rev 3 2019-08-28
snort ET TROJAN XCodeGhost DNS Lookup rev 2 2019-08-28
snort ET TROJAN Possible Winnti-related DNS Lookup rev 2 2019-08-28
snort ET TROJAN CryptON/Nemesis/X3M Ransomware Onion Domain rev 3 2019-08-28
snort ET TROJAN Mirai Botnet Domain Observed rev 2 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 26 rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup azureon-line.com rev 3 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 46 rev 2 2019-08-28
snort ET TROJAN DNS Query for Known Chewbacca CnC Server rev 3 2019-08-28
snort ET TROJAN Ponmocup Post Infection DNS Lookup messagewild rev 2 2019-08-28
snort ET WEB_CLIENT Fake AV Phone Scam Domain M3 Mar 3 rev 3 2019-08-28
snort ET TROJAN XCodeGhost DNS Lookup rev 2 2019-08-28
snort ET TROJAN Critroni Variant .onion Proxy Domain rev 2 2019-08-28
snort ET TROJAN Possible WannaCry DNS Lookup 4 rev 4 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 23 rev 2 2019-08-28
snort ET DNS DNS Lookup for localhost.DOMAIN.TLD rev 4 2019-08-28
snort ET TROJAN Critroni Variant .onion Proxy Domain rev 2 2019-08-28
snort ET TROJAN APT32 Komprogo DNS Lookup rev 2 2019-08-28
snort ET TROJAN Ransomware/Cerber Onion Domain Lookup rev 2 2019-08-28
snort ET TROJAN Spora Ransomware DNS Query rev 2 2019-08-28
snort ET TROJAN EncryptorRaas .onion Proxy Domain rev 2 2019-08-28
snort ET POLICY Android Adups Firmware DNS Query 2 rev 2 2019-08-28
snort ET POLICY Dropbox DNS Lookup - Possible Offsite File Backup in Use rev 2 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 6 rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 1 rev 2 2019-08-28
snort ET TROJAN Possible Winnti-related DNS Lookup rev 2 2019-08-28
snort ET TROJAN ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 3 2019-08-28
snort ET MOBILE_MALWARE DNS Query Targeted Tibetan Android Malware C2 Domain rev 4 2019-08-28
snort ET TROJAN Possible Winnti-related DNS Lookup rev 2 2019-08-28
snort ET TROJAN CustomRAT DNS lookup rev 2 2019-08-28
snort ET POLICY Android Adups Firmware DNS Query 5 rev 2 2019-08-28
snort ET TROJAN TorrentLocker DNS Lookup rev 3 2019-08-28
snort ET TROJAN Ransomware/Cerber Onion Domain Lookup rev 2 2019-08-28
snort ET TROJAN Ransomware/Cerber Onion Domain Lookup rev 2 2019-08-28
snort ET POLICY Android Adups Firmware DNS Query 3 rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup adawareblock.com rev 3 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 12 rev 2 2019-08-28
snort ET TROJAN DNS Query for Cloud Atlas blackberry-support.herokuapp.com rev 4 2019-08-28
snort ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Femas.b DNS Lookup rev 2 2019-08-28
snort ET WEB_SERVER DNS Query for Suspicious 33db9538.com Domain - Anuna Checkin - Compromised PHP Site rev 3 2019-08-28