Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE WildPressure/Milum CnC Activity rev 4 2024-04-30
suricata ET ADWARE_PUP CoinSurf Proxy Client Registration rev 3 2024-04-30
suricata ET MALWARE Stealbit Variant Data Exfil M2 rev 7 2024-04-30
suricata ET MALWARE Win32/Ymacco.AA67 CnC Activity rev 3 2024-04-30
suricata ET MALWARE Win32/Fluxer CnC Checkin rev 6 2024-04-30
suricata ET MOBILE_MALWARE Android/Kemoge Checkin 2 rev 5 2024-04-30
suricata ET MOBILE_MALWARE Kimsuky AppleSeed CnC Checkin rev 3 2024-04-30
suricata ET MALWARE OILRIG CnC POST rev 5 2024-04-30
suricata ET ADWARE_PUP Win32.Perinet CnC Checkin rev 4 2024-04-30
suricata ET MALWARE [FIREEYE] SLIGHTPULSE Webshell Activity M3 rev 4 2024-04-30
suricata ET MALWARE CNRarypt Ransomware CnC Activity rev 3 2024-04-30
suricata ET MALWARE [ANY.RUN] LgoogLoader Retrieving Config File rev 3 2024-04-30
suricata ET MALWARE W32/Upatre.Downloader Encoded Binary Download Request rev 5 2024-04-30
suricata ET MALWARE Win32.Rovnix.I Checkin rev 6 2024-04-30
suricata ET MALWARE X-Files Stealer CnC Exfil Activity M2 rev 3 2024-04-30
suricata ET MALWARE PWS.Win32/Daceluw.A Checkin rev 6 2024-04-30
suricata ET MALWARE Win32/Tofsee Connectivity Check M3 rev 4 2024-04-30
suricata ET MALWARE IIStealer Inbound Exfil Request rev 3 2024-04-30
suricata ET MALWARE W32/Alina.POS-Trojan Checkin rev 7 2024-04-30
suricata ET MALWARE Win32/Malgent!MSR User-Agent rev 3 2024-04-30
suricata ET MALWARE Win32.Pony Variant FOX Checkin rev 6 2024-04-30
suricata ET MALWARE Win32/Injector.BXEW Variant HTTP CnC Beacon 1 rev 6 2024-04-30
suricata ET HUNTING Request to .TOP Domain with Minimal Headers rev 4 2024-04-30
suricata ET HUNTING Terse Request for .txt - Likely Hostile rev 3 2024-04-30
suricata ET MALWARE [ANY.RUN] Win32/RootTeam Stealer CnC Exfil M3 rev 4 2024-04-30
suricata ET MALWARE TeleBots BCS-server CnC Beacon rev 5 2024-04-30
suricata ET MALWARE Suspected ToddyCat APT Curlu Related Activity M2 rev 3 2024-04-30
suricata ET MOBILE_MALWARE Android/SlemBunk.Banker Phished Credentials Upload rev 5 2024-04-30
suricata ET HUNTING Request to .TK Domain with Minimal Headers rev 4 2024-04-30
suricata ET INFO NSecSoft Remote Monitoring Update/Download Activity M1 rev 3 2024-04-30
suricata ET MALWARE GCleaner Downloader Activity M5 rev 3 2024-04-30
suricata ET HUNTING Request to 000webhostapp Domain with Minimal Headers rev 4 2024-04-30
suricata ET MALWARE TA402/Molerats CnC Activity rev 5 2024-04-30
suricata ET MALWARE W32/Threebyte.APT Checkin rev 5 2024-04-30
suricata ET MALWARE [FIREEYE] SLIGHTPULSE Webshell Activity M2 rev 3 2024-04-30
snort ET TROJAN Backdoor.Elise CnC Beacon 2 rev 4 2024-04-29
snort ET TROJAN Bookworm CnC Beacon 2 rev 3 2024-04-29
snort ET TROJAN Possible Royal Road Payload Retrieval Attempt rev 1 2024-04-29
snort ET CURRENT_EVENTS SUSPICIOUS EXE Download from Google Common Data Storage with no Referer rev 2 2024-04-29
snort ET TROJAN Quant Loader Download Request rev 3 2024-04-29