Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS BankAustria Phishing Domain Nov 03 2017 rev 4 2019-08-28
snort ET TROJAN Possible Winnti-related DNS Lookup rev 2 2019-08-28
snort ET CURRENT_EVENTS Raiffeisen Phishing Domain Nov 03 2017 rev 3 2019-08-28
snort ET TROJAN Zbot .onion Proxy Domain rev 3 2019-08-28
snort ET TROJAN Known IoT Malware Domain rev 2 2019-08-28
snort ET WEB_SERVER DNS Query for Suspicious 54dfa1cb.com Domain - Anuna Checkin - Compromised PHP Site rev 3 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 5 rev 2 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 20 rev 2 2019-08-28
snort ET TROJAN Mirai Botnet Domain Observed rev 2 2019-08-28
snort ET TROJAN Query to Known CnC Domain msnsolution.nicaze.net rev 5 2019-08-28
snort ET TROJAN TeslaCrypt/AlphaCrypt Variant .onion Proxy Domain rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup secnetcontrol.com rev 3 2019-08-28
snort ET TROJAN Ransomware/Cerber Onion Domain Lookup rev 2 2019-08-28
snort ET TROJAN PowerShell/Agent.A DNS File Transfer CnC Beacon rev 2 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 27 rev 2 2019-08-28
snort ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 15 rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup msonlinelive.com rev 2 2019-08-28
snort ET TROJAN Lazarus Decafett DNS Lookup 4 rev 2 2019-08-28
snort ET WEB_CLIENT Fake AV Phone Scam Domain M1 Mar 3 rev 3 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 16 rev 2 2019-08-28
snort ET TROJAN OSX/KeRanger Ransomware CnC DNS Request 2 rev 2 2019-08-28
snort ET POLICY Middle Earth Illegal Marketplace Tor Hidden Service DNS Query rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup check-fix.com rev 3 2019-08-28
snort ET WEB_CLIENT Possible Fake AV Phone Scam Long Domain Apr 4 rev 3 2019-08-28
snort ET INFO DNS Query for Suspicious .gdn Domain rev 3 2019-08-28
snort ET TROJAN Sofacy DNS Lookup malwarecheck.info rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup scanmalware.info rev 3 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 9 rev 2 2019-08-28
snort ET POLICY possible Xiaomi phone data leakage DNS rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup testservice24.net rev 3 2019-08-28
snort ET TROJAN Win32/Spy.Obator .onion Proxy Domain rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 8 rev 2 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 1 rev 2 2019-08-28
snort ET TROJAN Observed DNS Query to Gryphon CnC Domain / GlobeImposter Payment Domain rev 3 2019-08-28
snort ET TROJAN Possible WannaCry DNS Lookup 5 rev 4 2019-08-28
snort ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 16 rev 2 2019-08-28
snort ET TROJAN OSX/KeRanger Ransomware CnC DNS Request 3 rev 2 2019-08-28
snort ET TROJAN DeepEnd Research Ransomware CrypMIC Payment Onion Domain rev 3 2019-08-28
snort ET TROJAN EncryptorRaas .onion Proxy Domain rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 24 rev 2 2019-08-28