Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET INFO Possible Windows Binary Observed in SSL/TLS Certificate rev 4 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET PHISHING Successful Yahoo Credential Phish 2023-06-30 rev 2 2024-03-27
suricata ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET WEB_CLIENT WebDAV Retrieving an .url rev 3 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET EXPLOIT Possible CVE-2017-0199 HTA Inbound M2 rev 6 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET USER_AGENTS Kimsuky CnC Checkin User-Agent rev 2 2024-03-27
suricata ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MALWARE DarkCloud Stealer File Grabber Function Exfiltrating Data via Telegram rev 3 2024-03-27
suricata ET MALWARE VBS/Kimsuky UA Observed rev 4 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET INFO AhaDNS DNS Over HTTPS Certificate Inbound rev 4 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET INFO Observed MSI Download rev 6 2024-03-27
suricata ET MALWARE Win32/Fujacks Activity rev 16 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup rev 2 2024-03-27
suricata ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup rev 2 2024-03-27