Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Tordal/Hancitor/Chanitor Checkin rev 9 2024-05-02
suricata ET MOBILE_MALWARE Android/Spy.Agent.AOX Checkin rev 6 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.CrazyMango.a Checkin 2 rev 7 2024-05-02
suricata ET PHISHING Successful Personalized Webmail Phish 2016-10-05 rev 8 2024-05-02
suricata ET MALWARE Emotet Post Drop C2 Comms M2 rev 7 2024-05-02
suricata ET MALWARE Aveo Checkin rev 6 2024-05-02
suricata ET MALWARE Aveo C2 Response rev 6 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Wroba.m Checkin rev 6 2024-05-02
suricata ET MALWARE OSX/WizardUpdate CnC Activity rev 4 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.CrazyMango.a Checkin rev 7 2024-05-02
suricata ET MOBILE_MALWARE Android/FakeKakao checkin 1 rev 6 2024-05-02
suricata ET EXPLOIT Selenium Server Grid Chrome 3.141.59 Remote Code Execution - Successful rev 1 2024-05-02
suricata ET EXPLOIT Selenium Server Chrome 3.141.59 Remote Code Execution rev 2 2024-05-02
suricata ET MALWARE Win32.VBKrypt.vquj Checkin rev 8 2024-05-02
suricata ET MALWARE Win32/Neutrino Checkin 3 rev 7 2024-05-02
suricata ET EXPLOIT MVPower DVR Shell UCE rev 6 2024-05-02
suricata ET EXPLOIT Multiple CCTV-DVR Vendors RCE rev 6 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.CrazyMango.a CnC Beacon rev 7 2024-05-02
suricata ET MALWARE Win32/MereTam.A Ransomware CnC Checkin rev 4 2024-05-02
suricata ET INFO Selenium Server Grid Chrome 3.141.59 - Vulnerable Version Detected rev 1 2024-05-02
suricata ET EXPLOIT_KIT Spelevo EK Post-Compromise Data Dump rev 6 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Joker Checkin rev 6 2024-05-02
suricata ET INFO OnePlus phone data leakage rev 8 2024-05-02
suricata ET MALWARE [PTsecurity] Possible Cobalt Strike payload rev 6 2024-05-02
suricata ET EXPLOIT MVPower DVR Shell UCE MSF Check rev 6 2024-05-02
suricata ET MALWARE Blackmoon/Banbra Configuration Request rev 6 2024-05-02
suricata ET MALWARE Aveo C2 Request rev 6 2024-05-02
suricata ET MALWARE Possible BACKSWING JS Framework POST Observed rev 6 2024-05-02
suricata ET MALWARE Joanap CnC Checkin rev 7 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Ermak.a Checkin rev 5 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher Sending Credit Card Info rev 7 2024-05-02
suricata ET MOBILE_MALWARE Android.Trojan.HiddenApp.OU Checkin rev 6 2024-05-02
suricata ET MOBILE_MALWARE SMSSend Fake flappy bird APK rev 8 2024-05-02
suricata ET EXPLOIT MikroTik RouterOS Chimay Red Remote Code Execution Probe rev 6 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Acecard.c Checkin rev 8 2024-05-02
suricata ET MALWARE Win32/Spy.Banker.AAQD Checkin rev 10 2024-05-02
suricata ET ADWARE_PUP PUA Boxore User-Agent rev 8 2024-05-02
suricata ET MALWARE Blackmoon/Banbra Configuration Request M2 rev 6 2024-05-02
sigma Potentially Suspicious Execution Of PDQDeployRunner test 2024-05-02
snort ET TROJAN Vawtrak HTTP CnC Beacon rev 9 2024-05-01