Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Tatanga/Win32.Kexject.A Checkin rev 8 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Ermak.a Checkin rev 5 2024-05-02
suricata ET MOBILE_MALWARE Android/FakeKakao checkin 2 rev 6 2024-05-02
suricata ET MALWARE Aveo C2 Response rev 6 2024-05-02
suricata ET MALWARE Nuke Ransomware Checkin rev 7 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Wroba.m Checkin rev 6 2024-05-02
suricata ET EXPLOIT Selenium Server Grid Chrome 3.141.59 Remote Code Execution - Successful rev 1 2024-05-02
suricata ET INFO OnePlus phone data leakage rev 8 2024-05-02
suricata ET PHISHING Data Submitted to MyFreeSites.com - Possible Phishing rev 6 2024-05-02
suricata ET MOBILE_MALWARE Android.Trojan.HiddenApp.OU Checkin rev 6 2024-05-02
suricata ET EXPLOIT MVPower DVR Shell UCE MSF Check rev 6 2024-05-02
suricata ET MALWARE Blackmoon/Banbra Configuration Request M2 rev 6 2024-05-02
suricata ET ADWARE_PUP PUA Boxore User-Agent rev 8 2024-05-02
suricata ET INFO Selenium Server Grid Chrome 3.141.59 - Vulnerable Version Detected rev 1 2024-05-02
sigma Potentially Suspicious Execution Of PDQDeployRunner test 2024-05-02
snort ET TROJAN Vawtrak HTTP CnC Beacon rev 9 2024-05-01
suricata ET MALWARE APT28/Sofacy Zebrocy Secondary Payload CnC Checkin rev 4 2024-05-01
suricata ET MALWARE BePush/Kilim payload retrieval rev 8 2024-05-01
suricata ET MALWARE [PTsecurity] Donut Ransomware CnC Checkin rev 6 2024-05-01
suricata ET MALWARE Win32/Onliner CnC Checkin rev 5 2024-05-01
suricata ET INFO External Host Creating Docker Container rev 8 2024-05-01
suricata ET MALWARE Trojan.Nurjax Retrieving Domains via JS rev 7 2024-05-01
suricata ET MALWARE Win32/TrojanProxy.JpiProx.B CnC Beacon 2 rev 6 2024-05-01
suricata ET ADWARE_PUP DealPly Adware CnC Beacon rev 8 2024-05-01
suricata ET MALWARE Win32/Aura Ransomware CnC Activity rev 4 2024-05-01
suricata ET MALWARE Iron/Maktub Locker Ransomware CnC Checkin rev 4 2024-05-01
suricata ET ADWARE_PUP PUP Win32.SoftPulse Retrieving data rev 9 2024-05-01
suricata ET MALWARE Win32/DanijBot CnC Checkin rev 5 2024-05-01
suricata ET ADWARE_PUP W32/BettrExperience.Adware Update Checkin rev 7 2024-05-01
suricata ET ADWARE_PUP MALWARE W32/WinWrapper.Adware User-Agent rev 8 2024-05-01
suricata ET MALWARE Vawtrak HTTP CnC Beacon rev 12 2024-05-01
suricata ET MALWARE ELF/TooEasy Miner CnC Checkin rev 4 2024-05-01
suricata ET MALWARE Amadey Stealer CnC rev 4 2024-05-01
suricata ET WEB_SERVER Possible Darkleech C2 rev 6 2024-05-01
suricata ET MALWARE MSIL APT28 Zebrocy/Zekapab Reporting to CnC M2 rev 4 2024-05-01
suricata ET MOBILE_MALWARE Android/Locker.B Checkin 1 rev 6 2024-05-01
suricata ET MALWARE APT Lazarus Nukesped Downloader rev 4 2024-05-01
suricata ET MALWARE Possible Trojan.APT.9002 POST rev 6 2024-05-01
suricata ET MOBILE_MALWARE MOONSHINE payload C2 activity rev 5 2024-05-01
suricata ET MALWARE Win32/CryptFile2 / Revenge Ransomware Checkin M3 rev 6 2024-05-01