Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Win32/Obsidium Stealer Data Exfiltration Attempt M1 rev 1 2023-01-24
suricata ET ATTACK_RESPONSE UTF8 base64 string /This Program/ in DNS TXT Reponse rev 3 2023-01-24
suricata ET MALWARE Win32/Obsidium Stealer Data Exfiltration Attempt M6 rev 1 2023-01-24
suricata ET ATTACK_RESPONSE UTF8 base64 reversed string /This Program/ in DNS TXT Reponse rev 3 2023-01-24
suricata ET ATTACK_RESPONSE UTF8 base64 string /This Program/ in DNS TXT Reponse rev 3 2023-01-24
suricata ET MALWARE Win32/Obsidium Stealer Data Exfiltration Attempt M5 rev 1 2023-01-24
suricata ET ATTACK_RESPONSE UTF8 base64 wide string /This Program/ in DNS TXT Reponse rev 3 2023-01-24
suricata ET MALWARE Win32/Obsidium Stealer Data Exfiltration Attempt M9 rev 1 2023-01-24
suricata ET MALWARE Win32/Obsidium Stealer Data Exfiltration Attempt M4 rev 1 2023-01-24
suricata ET MALWARE Win32/Obsidium Stealer Data Exfiltration Attempt M7 rev 1 2023-01-24
suricata ET ATTACK_RESPONSE UTF16-LE base64 wide string /This Program/ in DNS TXT Reponse rev 3 2023-01-24
suricata ET ATTACK_RESPONSE UTF16-LE base64 wide string /This Program/ in DNS TXT Reponse rev 3 2023-01-24
suricata ET ATTACK_RESPONSE UTF16-LE base64 wide string /This Program/ in DNS TXT Reponse rev 3 2023-01-24
snort ET MOBILE_MALWARE Android/Gigabud CnC Check-in M2 rev 1 2023-01-23
snort ET TROJAN Win32/Sventore.B CnC Checkin rev 1 2023-01-23
snort ET MOBILE_MALWARE Android/Gigabud CnC Check-in M4 rev 1 2023-01-23
snort ET MOBILE_MALWARE Android/Gigabud CnC Check-in M6 rev 1 2023-01-23
snort ET MOBILE_MALWARE Android/Gigabud CnC Check-in M12 rev 1 2023-01-23
snort ET MOBILE_MALWARE Android/Gigabud CnC Check-in M10 rev 1 2023-01-23
snort ET MOBILE_MALWARE Android/Gigabud CnC Check-in M9 rev 1 2023-01-23
snort ET MOBILE_MALWARE Android/Gigabud CnC Check-in M1 rev 1 2023-01-23
snort ET CURRENT_EVENTS Successful Banco Galacia Credential Phish 2023-01-23 rev 1 2023-01-23
snort ET MOBILE_MALWARE Android/Gigabud CnC Check-in M11 rev 1 2023-01-23
snort ET MOBILE_MALWARE Android/Gigabud CnC Check-in M7 rev 1 2023-01-23
snort ET MOBILE_MALWARE Android/Gigabud CnC Check-in M5 rev 1 2023-01-23
snort ET MOBILE_MALWARE Android/Gigabud CnC Check-in M8 rev 1 2023-01-23
snort ET MOBILE_MALWARE Android/Gigabud CnC Check-in M3 rev 1 2023-01-23
suricata ET MOBILE_MALWARE Android/Gigabud CnC Check-in M10 rev 1 2023-01-23
suricata ET MOBILE_MALWARE Android/Gigabud CnC Check-in M3 rev 1 2023-01-23
suricata ET MOBILE_MALWARE Android/Gigabud CnC Check-in M7 rev 1 2023-01-23
suricata ET MOBILE_MALWARE Android/Gigabud CnC Check-in M5 rev 1 2023-01-23
suricata ET MOBILE_MALWARE Android/Gigabud CnC Check-in M2 rev 1 2023-01-23
suricata ET MOBILE_MALWARE Android/Gigabud CnC Check-in M6 rev 1 2023-01-23
suricata ET MOBILE_MALWARE Android/Gigabud CnC Check-in M1 rev 1 2023-01-23
suricata ET MOBILE_MALWARE Android/Gigabud CnC Check-in M9 rev 1 2023-01-23
suricata ET MOBILE_MALWARE Android/Gigabud CnC Check-in M4 rev 1 2023-01-23
suricata ET PHISHING Successful Banco Galacia Credential Phish 2023-01-23 rev 1 2023-01-23
suricata ET MOBILE_MALWARE Android/Gigabud CnC Check-in M8 rev 1 2023-01-23
suricata ET MOBILE_MALWARE Android/Gigabud CnC Check-in M11 rev 1 2023-01-23
suricata ET MOBILE_MALWARE Android/Gigabud CnC Check-in M12 rev 1 2023-01-23