Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET MOBILE_MALWARE Android Spyware Dowgin Checkin rev 1 2014-07-11
snort ET TROJAN CyberGate RAT Checkin rev 1 2014-07-10
snort ET EXPLOIT Zollard PHP Exploit UA rev 4 2014-07-09
snort ET EXPLOIT Zollard PHP Exploit UA Outbound rev 3 2014-07-09
snort ET WEB_SPECIFIC_APPS Possible WP Plug-in MailPoet Arbitrary File Upload/Auth Bypass Vulnerability rev 2 2014-07-08
snort ET TROJAN Infostealer.Bancos Checkin via SMTP rev 1 2014-07-07
snort ET TROJAN Win32/Zemot Checkin rev 2 2014-07-07
snort ET TROJAN W32/Antifulai.APT CnC Beacon 1 rev 3 2014-07-03
snort ET TROJAN Trojan.Karagany C&C Response rev 1 2014-07-02
snort ET TROJAN Possible W32/VBKlip BAN Download rev 1 2014-07-01
snort ET TROJAN Win32/Sharik Checkin rev 1 2014-06-30
snort ET TROJAN Win32/Sharik C2 Incoming Traffic rev 1 2014-06-30
snort ET WEB_SPECIFIC_APPS TimThumb Remote Command Execution rev 1 2014-06-26
snort ET WEB_SERVER PHP Crawler rev 1 2014-06-26
snort ET WEB_SERVER c99 Shell Backdoor Var Override Cookie rev 1 2014-06-24
snort ET WEB_SERVER c99 Shell Backdoor Var Override URI rev 1 2014-06-24
snort ET TROJAN W32/Citadel Download From CnC Server /files/ attachment rev 6 2014-06-24
snort ET EXPLOIT Supermicro BMC Password Disclosure 1 rev 2 2014-06-20
snort ET MOBILE_MALWARE Andr/com.sdwiurse rev 3 2014-06-20
snort ET EXPLOIT Supermicro BMC Password Disclosure 3 rev 2 2014-06-20
snort ET EXPLOIT Supermicro BMC Password Disclosure 4 rev 2 2014-06-20
snort ET EXPLOIT Supermicro BMC Password Disclosure 2 rev 2 2014-06-20
snort ET TROJAN Win32.FakeAV POST datan.php rev 2 2014-06-19
snort ET TROJAN W32/Goolbot.E Checkin UA Detected iamx rev 3 2014-06-19
snort ET CURRENT_EVENTS Bleeding Life 2 GPLed Exploit Pack exploit request rev 3 2014-06-19
snort ET CURRENT_EVENTS Bleeding Life 2 GPLed Exploit Pack payload download rev 3 2014-06-19
snort ET MALWARE Optimum Installer User-Agent IE6 on Windows XP rev 4 2014-06-19
snort ET TROJAN Sasfis Botnet Client Reporting Back to Controller After Command Execution rev 6 2014-06-17
snort ET TROJAN Hangover related campaign Checkin rev 1 2014-06-16
snort ET MOBILE_MALWARE Android/Netisend.A Posting Information to CnC rev 3 2014-06-12
snort ET TROJAN Putter Panda 3PARA RAT initial beacon rev 2 2014-06-11
snort ET TROJAN Pandemiya User-Agent rev 1 2014-06-10
snort ET WEB_SPECIFIC_APPS JCE Joomla Extension rev 2 2014-06-10
snort ET TROJAN EtumBot Ping rev 2 2014-06-09
snort ET TROJAN EtumBot Registration Request rev 5 2014-06-09
snort ET TROJAN PlugX/Destory HTTP traffic rev 1 2014-06-06
snort ET P2P zzima_loader rev 1 2014-06-05
snort ET TROJAN Soraya C2 User-Agent rev 1 2014-06-04
snort ET MOBILE_MALWARE AndroidOS/Lotoor.Q rev 2 2014-06-04
snort ET TROJAN Win32.Crypt.nc Checkin rev 4 2014-06-04