Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Revcode RAT CnC 2 rev 5 2024-05-01
suricata ET MALWARE Win32/TrojanProxy.JpiProx.B CnC Beacon 2 rev 6 2024-05-01
suricata ET MALWARE APT28/Sofacy Zebrocy Secondary Payload CnC Checkin rev 4 2024-05-01
suricata ET INFO Android Device Connectivity Check rev 6 2024-05-01
suricata ET MALWARE Trojan.Nurjax Retrieving Domains via JS rev 7 2024-05-01
suricata ET ADWARE_PUP W32/BettrExperience.Adware Initial Checkin rev 7 2024-05-01
suricata ET ADWARE_PUP W32/BettrExperience.Adware Update Checkin rev 7 2024-05-01
suricata ET MOBILE_MALWARE Android/Opfake.A Country CnC Beacon rev 10 2024-05-01
suricata ET MALWARE Win32/DanijBot CnC Checkin rev 5 2024-05-01
suricata ET ADWARE_PUP Crossrider Spyware Checkin rev 8 2024-05-01
suricata ET MALWARE StealerNeko CnC Checkin rev 5 2024-05-01
suricata ET ADWARE_PUP Loadmoney Checkin 4 rev 8 2024-05-01
suricata ET MALWARE Win32/Retadup CnC Checkin M1 rev 5 2024-05-01
suricata ET MALWARE Win32/Bisonal RC4 Encrypted 8 Byte Static CnC Checkin rev 5 2024-05-01
suricata ET MALWARE Possible Sharik/Smoke Loader Microsoft Connectivity check rev 6 2024-05-01
suricata ET ADWARE_PUP MALWARE W32/WinWrapper.Adware User-Agent rev 8 2024-05-01
suricata ET MALWARE Vawtrak HTTP CnC Beacon rev 12 2024-05-01
suricata ET MALWARE Clipsa Stealer - CnC Checkin rev 6 2024-05-01
snort ET CURRENT_EVENTS Parrot TDS Cleared Response M2 rev 1 2024-04-30
snort ET CURRENT_EVENTS Parrot TDS Malicious Response M2 rev 1 2024-04-30
snort ET TROJAN NOBELIUM - Cobalt Strike Malleable Profile M2 rev 3 2024-04-30
suricata ET MOBILE_MALWARE AndroidOS/Lotoor.Q rev 8 2024-04-30
suricata ET EXPLOIT_KIT Possible Broken/Filtered RIG EK Payload Download rev 7 2024-04-30
suricata ET MALWARE SuperFish CnC Beacon 1 rev 5 2024-04-30
suricata ET MALWARE Bazaloader Variant Activity rev 3 2024-04-30
suricata ET MALWARE [FIREEYE] SLIGHTPULSE Webshell Activity M3 rev 4 2024-04-30
suricata ET ADWARE_PUP Win32.Perinet CnC Checkin rev 4 2024-04-30
suricata ET MALWARE W32/Upatre.Downloader Encoded Binary Download Request rev 5 2024-04-30
suricata ET MALWARE W32/Threebyte.APT Checkin rev 5 2024-04-30
suricata ET MALWARE Vawtrak/NeverQuest Posting Data rev 5 2024-04-30
suricata ET MALWARE Suspected ToddyCat APT Curlu Related Activity M2 rev 3 2024-04-30
suricata ET MALWARE Win32/Malgent!MSR User-Agent rev 3 2024-04-30
suricata ET MALWARE Maldoc Downloading from Dropbox via API rev 3 2024-04-30
suricata ET HUNTING Request to 000webhostapp Domain with Minimal Headers rev 4 2024-04-30
suricata ET MALWARE Suspected Bumblebee Loader Activity rev 3 2024-04-30
suricata ET INFO NSecSoft Remote Monitoring Update/Download Activity M1 rev 3 2024-04-30
suricata ET MALWARE Win64/Agent.BP System Info Exfil rev 3 2024-04-30
suricata ET ADWARE_PUP Win32 Handy Cafe Checkin rev 3 2024-04-30
suricata ET MALWARE VBS/TrojanDownloader.Agent.SEB Checkin rev 3 2024-04-30
suricata ET MALWARE Faked Russian Opera UA without Accept - probable downloader rev 6 2024-04-30