Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MOBILE_MALWARE Trojan-Dropper.AndroidOS.Anatsa Checkin rev 6 2024-05-04
snort ET TROJAN Nitrogen Loader Activity rev 1 2024-05-03
snort ET TROJAN Goldoon Botnet Payload Retrieval Attempt rev 1 2024-05-03
suricata ET MALWARE Nitrogen Loader Activity rev 1 2024-05-03
suricata ET MALWARE Goldoon Botnet Payload Retrieval Attempt rev 1 2024-05-03
sigma New Windows Firewall Rule Added Via New-NetFirewallRule Cmdlet test 2024-05-03
snort ET INFO Selenium Server Grid Chrome 3.141.59 - Vulnerable Version Detected rev 1 2024-05-02
snort ET EXPLOIT Selenium Server Chrome 3.141.59 Remote Code Execution rev 2 2024-05-02
snort ET EXPLOIT Selenium Server Grid Chrome 3.141.59 Remote Code Execution - Successful rev 1 2024-05-02
suricata ET MALWARE Aveo Checkin rev 6 2024-05-02
suricata ET MALWARE Tordal/Hancitor/Chanitor Checkin rev 9 2024-05-02
suricata ET MOBILE_MALWARE SMSSend Fake flappy bird APK rev 8 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Wroba.m Checkin rev 6 2024-05-02
suricata ET MOBILE_MALWARE Android/FakeKakao checkin 1 rev 6 2024-05-02
suricata ET MALWARE Aveo C2 Response rev 6 2024-05-02
suricata ET MALWARE Blackmoon/Banbra Configuration Request M2 rev 6 2024-05-02
suricata ET MALWARE Win32/Spy.Banker.AAQD Checkin rev 10 2024-05-02
suricata ET MALWARE Win32/MereTam.A Ransomware CnC Checkin rev 4 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Acecard.c Checkin rev 8 2024-05-02
suricata ET EXPLOIT MVPower DVR Shell UCE MSF Check rev 6 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.CrazyMango.a CnC Beacon rev 7 2024-05-02
suricata ET MALWARE Win32/Neutrino Checkin 3 rev 7 2024-05-02
suricata ET MALWARE Joanap CnC Checkin rev 7 2024-05-02
suricata ET MALWARE Possible BACKSWING JS Framework POST Observed rev 6 2024-05-02
suricata ET PHISHING Data Submitted to MyFreeSites.com - Possible Phishing rev 6 2024-05-02
suricata ET EXPLOIT Multiple CCTV-DVR Vendors RCE rev 6 2024-05-02
suricata ET EXPLOIT MVPower DVR Shell UCE rev 6 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Ermak.a Checkin rev 5 2024-05-02
suricata ET MALWARE Aveo C2 Request rev 6 2024-05-02
suricata ET INFO OnePlus phone data leakage rev 8 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher Sending Credit Card Info rev 7 2024-05-02
suricata ET MALWARE [PTsecurity] Possible Cobalt Strike payload rev 6 2024-05-02
suricata ET MALWARE Emotet Post Drop C2 Comms M2 rev 7 2024-05-02
suricata ET MALWARE Win32/Neutrino Checkin 6 rev 6 2024-05-02
suricata ET INFO Selenium Server Grid Chrome 3.141.59 - Vulnerable Version Detected rev 1 2024-05-02
suricata ET ADWARE_PUP PUA Boxore User-Agent rev 8 2024-05-02
suricata ET MOBILE_MALWARE Android/Spy.Agent.AOX Checkin rev 6 2024-05-02
suricata ET MALWARE Nuke Ransomware Checkin rev 7 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Joker Checkin rev 6 2024-05-02
suricata ET EXPLOIT_KIT Spelevo EK Post-Compromise Data Dump rev 6 2024-05-02