Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_CLIENT Blatantly Evil JS Function rev 2 2014-02-28
snort ET TROJAN Trojan.Delf-5496 New Infection Report rev 5 2014-02-27
snort ET CURRENT_EVENTS SUSPICIOUS .PIF File Inside of Zip rev 5 2014-02-27
snort ET CURRENT_EVENTS SUSPICIOUS .exe Downloaded from SVN/HTTP on GoogleCode rev 1 2014-02-27
snort ET WEB_SPECIFIC_APPS Symantec Endpoint Manager XXE RCE Attempt rev 3 2014-02-26
snort ET CURRENT_EVENTS SUSPICIOUS XXTEA UTF-16 Encoded HTTP Response rev 2 2014-02-26
snort ET WEB_CLIENT SUSPICIOUS Java Lang Runtime in Response rev 1 2014-02-25
snort ET POLICY Application Crash Report Sent to Microsoft rev 1 2014-02-24
snort ET TROJAN Gh0st Trojan CnC 3 rev 2 2014-02-24
snort ET EXPLOIT Linksys Auth Bypass switch_boot.cgi rev 2 2014-02-19
snort ET EXPLOIT Linksys Auth Bypass share_editor.cgi rev 2 2014-02-19
snort ET TROJAN Trojan.MyDNS DNSChanger - HTTP POST rev 8 2014-02-19
snort ET EXPLOIT Linksys Auth Bypass fw_sys_up.cgi rev 2 2014-02-19
snort ET EXPLOIT Linksys Auth Bypass override.cgi rev 1 2014-02-19
snort ET WEB_CLIENT EMET Detection Via XMLDOM rev 2 2014-02-18
snort ET TROJAN W32/Dadobra.Downloader/DNSChanger Dnsmake CnC Beacon rev 1 2014-02-18
snort ET TROJAN MSIL.Zapchast Checkin rev 1 2014-02-15
snort ET TROJAN W32/Asprox.ClickFraudBot POST CnC Beacon rev 2 2014-02-14
snort ET TROJAN Android/FakeKakao checkin rev 2 2014-02-14
snort ET MOBILE_MALWARE Android/FakeKakao checkin 2 rev 1 2014-02-14
snort ET MOBILE_MALWARE Android/FakeKakao checkin 3 rev 1 2014-02-14
snort ET MOBILE_MALWARE Android/FakeKakao checkin 1 rev 1 2014-02-14
snort ET TROJAN Alman Dropper Checkin rev 4 2014-02-13
snort ET TROJAN Win32/Tapazom.A 2 rev 1 2014-02-13
snort ET TROJAN Infostealer.Jackpos Checkin 2 rev 1 2014-02-13
snort ET CURRENT_EVENTS SUSPICIOUS .CPL File Inside of Zip rev 2 2014-02-13
snort ET TROJAN MS Remote Desktop micros User Login Request rev 3 2014-02-13
snort ET TROJAN Win32/Tapazom.A rev 1 2014-02-13
snort ET TROJAN MS Remote Desktop edc User Login Request rev 1 2014-02-12
snort ET WEB_SERVER Apache Tomcat Boundary Overflow DOS/File Upload Attempt rev 1 2014-02-12
snort ET TROJAN Blackbeard Check-in rev 1 2014-02-12
snort ET WEB_SERVER Recon-ng User-Agent rev 1 2014-02-12
snort ET TROJAN Banking Trojan HTTP Cookie rev 1 2014-02-12
snort ET WEB_SPECIFIC_APPS JoomSocial AvatarUpload RCE rev 8 2014-02-11
snort ET INFO Suspicious Jar name JavaUpdate.jar rev 2 2014-02-11
snort ET TROJAN Possible Mask C2 Traffic rev 1 2014-02-11
snort ET TROJAN W32/Asprox.ClickFraudBot CnC Beacon rev 1 2014-02-10
snort ET TROJAN W32/Rshot.Backdoor File Upload CnC Beacon rev 1 2014-02-10
snort ET TROJAN W32/Asprox.ClickFraudBot CnC Beacon Acknowledgement rev 1 2014-02-10
snort ET FTP Outbound Java Downloading jar over FTP rev 2 2014-02-03