Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN Horabot CnC Host Details Exfil rev 1 2024-05-16
snort ET TROJAN Horabot Payload Inbound rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer Data Exfiltration Attempt M2 rev 1 2024-05-16
suricata ET MALWARE TorrentLocker DNS Lookup rev 7 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE Ponmocup Post Infection DNS Lookup messagewild rev 6 2024-05-16
suricata ET MALWARE Horabot CnC Host Details Exfil rev 1 2024-05-16
suricata ET MALWARE Horabot Payload Inbound rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer Data Exfiltration Attempt M2 rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN Observed ClickFix Fake Update iframe Injection Attempt rev 1 2024-05-14
suricata ET MALWARE Observed ClickFix Fake Update iframe Injection Attempt rev 1 2024-05-14
snort ET TROJAN Possible XWorm Payload Downloaded via Powershell rev 1 2024-05-13
suricata ET MALWARE Possible XWorm Payload Downloaded via Powershell rev 1 2024-05-13
sigma Scheduled Task Creation From Potential Suspicious Parent Location test 2024-05-13
sigma Uncommon FileSystem Load Attempt By Format.com test 2024-05-13
sigma Launch Agent/Daemon Execution Via Launchctl test 2024-05-13