Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Sofacy DNS Lookup windows-updater.com rev 3 2019-08-28
snort ET TROJAN Sofacy DNS Lookup checkmalware.org rev 3 2019-08-28
snort ET TROJAN ABUSE.CH TorrenLocker Payment Domain Detected rev 2 2019-08-28
snort ET TROJAN ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 2 2019-08-28
snort ET WEB_CLIENT Possible Fake AV Phone Scam Long Domain Mar 30 M2 rev 4 2019-08-28
snort ET TROJAN Lazarus Decafett DNS Lookup 1 rev 2 2019-08-28
snort ET TROJAN OSX/KeRanger Ransomware CnC DNS Request 3 rev 2 2019-08-28
snort ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 16 rev 2 2019-08-28
snort ET TROJAN EncryptorRaas .onion Proxy Domain rev 2 2019-08-28
snort ET TROJAN DeepEnd Research Ransomware CrypMIC Payment Onion Domain rev 3 2019-08-28
snort ET TROJAN FrameworkPOS Covert DNS CnC Initial Check In rev 2 2019-08-28
snort ET TROJAN Critroni Variant .onion Proxy Domain rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup checkmalware.info rev 3 2019-08-28
snort ET TROJAN DNS Query Sykipot Domain rusview.net rev 2 2019-08-28
snort ET TROJAN LYCEUM CnC Domain Observed in DNS Query rev 2 2019-08-28
snort ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Femas.b DNS Lookup rev 2 2019-08-28
snort ET TROJAN Possible Winnti-related DNS Lookup rev 2 2019-08-28
snort ET TROJAN DeepEnd Research Ransomware CrypMIC Payment Onion Domain rev 3 2019-08-28
snort ET TROJAN ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 2 2019-08-28
snort ET TROJAN Ransomware/Cerber Onion Domain Lookup rev 2 2019-08-28
snort ET TROJAN CryptON/Nemesis/X3M Ransomware Onion Domain rev 3 2019-08-28
snort ET TROJAN CryptON/Nemesis/X3M Ransomware Onion Domain rev 3 2019-08-28
snort ET TROJAN Ransomware/Cerber Onion Domain Lookup rev 2 2019-08-28
snort ET MOBILE_MALWARE Android/Kemoge DNS Lookup rev 2 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 6 rev 2 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 15 rev 2 2019-08-28
snort ET TROJAN DNS query for Morto RDP worm related domain jaifr.com rev 3 2019-08-28
snort ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup rev 2 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 42 rev 2 2019-08-28
snort ET DNS DNS Lookup for localhost.DOMAIN.TLD rev 4 2019-08-28
snort ET TROJAN Ransomware Locky .onion Payment Domain rev 2 2019-08-28
snort ET TROJAN Mirai Botnet Domain Observed rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup microsof-update.com rev 3 2019-08-28
snort ET TROJAN Mirai Botnet Domain Observed rev 2 2019-08-28
snort ET POLICY Dropbox DNS Lookup - Possible Offsite File Backup in Use rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 23 rev 2 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 45 rev 2 2019-08-28
snort ET MOBILE_MALWARE Android/Spy.Agent.AOX Checkin rev 1 2019-08-27
snort ET TROJAN Win32/Alpha Stealer v1.5 PWS Exfil via HTTP rev 2 2019-08-26
snort ET POLICY Quad9 DNS Over TLS Certificate Inbound rev 2 2019-08-26