Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN DNS Query Sykipot Domain insdet.com rev 2 2019-08-28
snort ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 7 rev 2 2019-08-28
snort ET WEB_CLIENT Fake AV Phone Scam Domain M1 Mar 3 rev 3 2019-08-28
snort ET TROJAN Sofacy DNS Lookup securitypractic.com rev 3 2019-08-28
snort ET TROJAN APT32 Komprogo DNS Lookup rev 2 2019-08-28
snort ET TROJAN TeslaCrypt/AlphaCrypt Variant .onion Proxy Domain rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 10 rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 11 rev 2 2019-08-28
snort ET TROJAN Ransomware/Cerber Onion Domain Lookup rev 2 2019-08-28
snort ET TROJAN OSX/WireLurker DNS Query Domain manhuaba.com.cn rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 13 rev 2 2019-08-28
snort ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 11 rev 2 2019-08-28
snort ET TROJAN PowerShell/Agent.A DNS File Transfer CnC Beacon rev 2 2019-08-28
snort ET POLICY DNS Query for try2check.me Carder Tool rev 4 2019-08-28
snort ET TROJAN APT32 Komprogo DNS Lookup rev 3 2019-08-28
snort ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Femas.b DNS Lookup rev 2 2019-08-28
snort ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 4 rev 2 2019-08-28
snort ET TROJAN APT28 DealersChoice DNS Lookup rev 3 2019-08-28
snort ET TROJAN Sofacy DNS Lookup updatesoftware24.com rev 3 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 34 rev 2 2019-08-28
snort ET TROJAN Lazarus Decafett DNS Lookup 3 rev 2 2019-08-28
snort ET TROJAN CFR DRIVEBY CVE-2012-4792 DNS Query for C2 domain rev 3 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 16 rev 2 2019-08-28
snort ET TROJAN ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 2 2019-08-28
snort ET TROJAN Possible Winnti-related DNS Lookup rev 2 2019-08-28
snort ET MOBILE_MALWARE DNS Query Targeted Tibetan Android Malware C2 Domain rev 4 2019-08-28
snort ET TROJAN Possible Winnti-related DNS Lookup rev 2 2019-08-28
snort ET TROJAN DNS query for Morto RDP worm related domain jaifr.com rev 3 2019-08-28
snort ET POLICY Android Adups Firmware DNS Query 4 rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup microsofi.org rev 3 2019-08-28
snort ET TROJAN Sofacy DNS Lookup checkmalware.info rev 3 2019-08-28
snort ET TROJAN CryptoWall/TeslaCrypt Payment Domain rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 27 rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 20 rev 2 2019-08-28
snort ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 2 rev 2 2019-08-28
snort ET TROJAN Likely CryptoWall .onion Proxy DNS lookup rev 2 2019-08-28
snort ET TROJAN APT28 DealersChoice DNS Lookup rev 3 2019-08-28
snort ET MOBILE_MALWARE DNS Trojan-Banker.AndroidOS.Marcher.i Query rev 2 2019-08-28
snort ET TROJAN Likely CryptoWall 2.0 .onion Proxy domain lookup rev 2 2019-08-28