Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Hangover related campaign Checkin rev 4 2024-04-20
suricata ET MALWARE DarkHotel Downloader CnC Beacon 1 rev 4 2024-04-20
suricata ET MALWARE CBReplay Checkin rev 4 2024-04-20
suricata ET MALWARE Cohhoc RAT CnC Request rev 6 2024-04-20
suricata ET EXPLOIT_KIT SUSPICIOUS Request for Grey Advertising Often Leading to EK rev 5 2024-04-20
suricata ET MALWARE W32/TrojanSpy.MSIL Get New MAC CnC Beacon rev 4 2024-04-20
suricata ET INFO Nimiq Miner Initiating Mining Session with Skypool rev 3 2024-04-20
suricata ET MALWARE Ransomware Locky CnC Beacon rev 6 2024-04-20
suricata ET MALWARE Win32/RocketX Stealer CnC Exfil rev 2 2024-04-20
suricata ET MALWARE MSIL/G2 Stealer/GravityRAT CnC Checkin rev 3 2024-04-20
suricata ET MALWARE Yayih.A Checkin rev 5 2024-04-20
suricata ET MALWARE CoreDn CnC Checkin M1 rev 3 2024-04-20
suricata ET MALWARE DustySky CnC Beacon rev 7 2024-04-20
suricata ET PHISHING Successful Generic Email Account Phish 2019-12-10 rev 2 2024-04-20
suricata ET MALWARE Malicious Chrome Extension Requesting Websocket rev 3 2024-04-20
suricata ET MALWARE SolarBot Plugin Download MessageBox rev 4 2024-04-20
suricata ET HUNTING Possible UPnP UUID Overflow Exploit Attempt from External Host - SUBSCRIBE/UNSUBSCRIBE rev 2 2024-04-20
suricata ET MALWARE Win32/TrojanDownloader.Delf.BXC CnC Beacon rev 4 2024-04-20
suricata ET MALWARE Win32/CollectorStealer CnC Exfil M2 rev 2 2024-04-20
suricata ET MALWARE Win32/Geodo Checkin rev 12 2024-04-20
suricata ET MALWARE Hangover related campaign Response rev 6 2024-04-20
suricata ET MALWARE SAD Ransomware CnC Activity rev 4 2024-04-20
suricata ET MALWARE Evrial Stealer CnC Activity rev 3 2024-04-20
suricata ET MALWARE Razy Variant Checkin rev 12 2024-04-20
suricata ET EXPLOIT Possible Magento Directory Traversal Attempt rev 4 2024-04-20
suricata ET MALWARE Evrial Stealer Retrieving CnC Information rev 3 2024-04-20
suricata ET MALWARE Ransomware Locky CnC Beacon rev 8 2024-04-20
suricata ET MALWARE [PT MALWARE] Hacked Mikrotik C2 Request rev 8 2024-04-20
suricata ET MALWARE BlackTech/PLEAD TSCookie CnC Checkin M1 rev 6 2024-04-20
suricata ET ADWARE_PUP SoftwareTracking Site - Install Report rev 2 2024-04-20
suricata ET MALWARE Ixeshe/Mecklow Checkin rev 13 2024-04-20
suricata ET MALWARE ELF/Kinsing Payload Request M2 rev 2 2024-04-20
suricata ET MALWARE Generic -POST To file.php w/Extended ASCII Characters rev 11 2024-04-20
suricata ET MALWARE CoinVault POST M2 rev 4 2024-04-20
suricata ET MALWARE W32/Citadel.Arx Variant CnC Beacon 1 rev 4 2024-04-20
suricata ET MALWARE Trojan Generic - POST To gate.php with no referer rev 12 2024-04-20
suricata ET MALWARE SolarBot Plugin Download ComputerInfo rev 4 2024-04-20
suricata ET MALWARE DarkHotel Initial Beacon rev 4 2024-04-20
suricata ET MALWARE W32/TrojanSpy.MSIL Set Done Day CnC Beacon rev 4 2024-04-20
suricata ET MALWARE Win32/Rarog Stealer CnC Checkin rev 2 2024-04-20