Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
snort ET TROJAN Tenorshare Google Analytics Checkin rev 3 2024-05-28
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
snort ET EXPLOIT Fortinet FortiSIEM Unauthenticated Command Injection CVE-2024-23108 rev 1 2024-05-28
snort ET TROJAN Clipboard Monitor Data Exfiltration Attempt rev 1 2024-05-28
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
snort ET MOBILE_MALWARE Suspected APT Starry Addax CnC Domain in DNS Lookup 2 rev 1 2024-05-28
snort ET TROJAN CrimsonRAT Host Details Exfil rev 1 2024-05-28
snort ET TROJAN Suspected TA450 Activity rev 1 2024-05-28
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MOBILE_MALWARE Suspected APT Starry Addax CnC Domain in DNS Lookup 2 rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET EXPLOIT Fortinet FortiSIEM Unauthenticated Command Injection CVE-2024-23108 rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MALWARE Suspected TA450 Activity rev 1 2024-05-28
suricata ET MOBILE_MALWARE Suspected APT Starry Addax DNS Lookup rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MALWARE Clipboard Monitor Data Exfiltration Attempt rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MALWARE CrimsonRAT Host Details Exfil rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
sigma CA Policy Updated by Non Approved Actor test 2024-05-28
sigma Network Connection Initiated To Cloudflared Tunnels Domains test 2024-05-27
sigma Uncommon File Creation By Mysql Daemon Process test 2024-05-27
sigma Uncommon Process Access Rights For Target Image test 2024-05-27
sigma System Information Discovery Via Sysctl - MacOS test 2024-05-27
snort ET TROJAN Unknown RAT CnC Checkin rev 1 2024-05-23
suricata ET MALWARE Unknown RAT CnC Checkin rev 1 2024-05-23
snort ET TROJAN UNK_ConsoleCollie CnC Checkin rev 1 2024-05-22
snort ET TROJAN Observed UNK_ConsoleCollie Malicious SSL Cert rev 1 2024-05-22
snort ET SCAN OpenVASVT RCE Test String in HTTP Request Outbound rev 3 2024-05-22
snort ET SCAN OpenVASVT RCE Test String in HTTP Request Inbound M2 rev 1 2024-05-22