Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Sofacy DNS Lookup msonlinelive.com rev 2 2019-08-28
snort ET POLICY Middle Earth Illegal Marketplace Tor Hidden Service DNS Query rev 2 2019-08-28
snort ET TROJAN APT32 Komprogo DNS Lookup rev 2 2019-08-28
snort ET POLICY Query to a *.opengw.net Open VPN Relay Domain rev 6 2019-08-28
snort ET TROJAN Lazarus Decafett DNS Lookup 4 rev 2 2019-08-28
snort ET TROJAN CryptON/Nemesis/X3M Ransomware Onion Domain rev 3 2019-08-28
snort ET TROJAN Sofacy DNS Lookup malwarecheck.info rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 2 rev 2 2019-08-28
snort ET TROJAN Query to Known CnC Domain msnsolution.nicaze.net rev 5 2019-08-28
snort ET TROJAN LYCEUM CnC Domain Observed in DNS Query rev 2 2019-08-28
snort ET TROJAN ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 2 2019-08-28
snort ET POLICY possible Xiaomi phone data leakage DNS rev 2 2019-08-28
snort ET WEB_SERVER DNS Query for Suspicious 54dfa1cb.com Domain - Anuna Checkin - Compromised PHP Site rev 3 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 20 rev 2 2019-08-28
snort ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 14 rev 2 2019-08-28
snort ET TROJAN DNS Query Sykipot Domain insdet.com rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 14 rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 25 rev 2 2019-08-28
snort ET TROJAN LYCEUM CnC Domain Observed in DNS Query rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 22 rev 2 2019-08-28
snort ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 9 rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup microsof-update.com rev 3 2019-08-28
snort ET TROJAN Possible Winnti-related DNS Lookup rev 2 2019-08-28
snort ET TROJAN Possible Winnti-related DNS Lookup rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup microsofi.org rev 3 2019-08-28
snort ET MOBILE_MALWARE DNS Trojan-Banker.AndroidOS.Marcher.i Query rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 16 rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup symanttec.org rev 3 2019-08-28
snort ET TROJAN Likely CryptoWall .onion Proxy DNS lookup rev 2 2019-08-28
snort ET TROJAN DNS Query Sykipot Domain rusview.net rev 2 2019-08-28
snort ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher DNS Lookup rev 2 2019-08-28
snort ET TROJAN OSX/Keydnap DNS Query to CnC rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup checkmalware.info rev 3 2019-08-28
snort ET TROJAN DNS query for Morto RDP worm related domain jaifr.com rev 3 2019-08-28
snort ET TROJAN Mirai Botnet Domain Observed rev 2 2019-08-28
snort ET TROJAN CryptON/Nemesis/X3M Ransomware Onion Domain rev 3 2019-08-28
snort ET TROJAN Likely CryptoWall 2.0 .onion Proxy domain lookup rev 2 2019-08-28
snort ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Femas.b DNS Lookup rev 2 2019-08-28
snort ET TROJAN Zbot .onion Proxy Domain rev 3 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 3 rev 2 2019-08-28