Latest Suricata Rules

Showing 1-50
SIDMessageSourceCreated
2072258ET MALWARE Portuguese JS Dropper Payload Request
et/open
Sep 24, 2026
2072257ET ATTACK_RESPONSE Observed Portuguese JS Dropper Inbound M3
et/open
Sep 24, 2026
2072256ET MALWARE Observed Win32/Lumma Stealer Related Domain (sectionobligationpow .site) in TLS SNI
et/open
Sep 24, 2026
2072255ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sectionobligationpow .site)
et/open
Sep 24, 2026
2072254ET MALWARE TA569 Gholoader CnC Domain in TLS SNI (sso .ebeenj .com)
et/open
Sep 24, 2026
2072253ET MALWARE TA569 Gholoader CnC Domain in DNS Lookup (sso .ebeenj .com)
et/open
Sep 24, 2026
1000989PTS STALKERWARE Msafely (tun-cos-1258344701[.]file[.]myqcloud[.]com)
stalkerware-indicators
Sep 24, 2026
1000988PTS STALKERWARE Msafely (strapi[.]msafely[.]com)
stalkerware-indicators
Sep 24, 2026
1000987PTS STALKERWARE Msafely (strapi[.]spyx[.]com)
stalkerware-indicators
Sep 24, 2026
1000986PTS STALKERWARE Msafely (strapi[.]spyphone[.]cc)
stalkerware-indicators
Sep 24, 2026
1000985PTS STALKERWARE Spynger (mob-app-gw[.]spynger[.]net)
stalkerware-indicators
Sep 24, 2026
1000984PTS STALKERWARE Spynger (ios-gw[.]spynger[.]net)
stalkerware-indicators
Sep 24, 2026
1000983PTS STALKERWARE Spynger (my[.]spynger[.]net)
stalkerware-indicators
Sep 24, 2026
1000982PTS STALKERWARE PhoneMonitor (users[.]thephonem[.]com)
stalkerware-indicators
Sep 24, 2026
1000981PTS STALKERWARE 201[.]33[.]21[.]62 (stalkerware)
stalkerware-indicators
Sep 24, 2026
1000980PTS STALKERWARE eagleSPY (eaglespy[.]com[.]br)
stalkerware-indicators
Sep 24, 2026
1000979PTS STALKERWARE Spyone (laucass[.]forumactif[.]org)
stalkerware-indicators
Sep 24, 2026
1000978PTS STALKERWARE Spyone (ur[.]spyone[.]pl)
stalkerware-indicators
Sep 24, 2026
1000977PTS STALKERWARE Spyone (pc[.]spyone[.]pl)
stalkerware-indicators
Sep 24, 2026
1000976PTS STALKERWARE BrunoEspiao (brunoespiao2[.]s3[.]amazonaws[.]com)
stalkerware-indicators
Sep 24, 2026
1000975PTS STALKERWARE BrunoEspiao (www[.]brunoespiao[.]com[.]br)
stalkerware-indicators
Sep 24, 2026
1000974PTS STALKERWARE BrunoEspiao (ur[.]brunoespiao[.]com[.]br)
stalkerware-indicators
Sep 24, 2026
1000973PTS STALKERWARE BrunoEspiao (uf1[.]brunoespiao[.]com[.]br)
stalkerware-indicators
Sep 24, 2026
1000972PTS STALKERWARE BrunoEspiao (uf[.]brunoespiao[.]com[.]br)
stalkerware-indicators
Sep 24, 2026
1000971PTS STALKERWARE BrunoEspiao (ue[.]brunoespiao[.]com[.]br)
stalkerware-indicators
Sep 24, 2026
1000970PTS STALKERWARE BrunoEspiao (ua[.]brunoespiao[.]com[.]br)
stalkerware-indicators
Sep 24, 2026
1000969PTS STALKERWARE BrunoEspiao (pc1[.]brunoespiao[.]com[.]br)
stalkerware-indicators
Sep 24, 2026
1000968PTS STALKERWARE BrunoEspiao (pc[.]brunoespiao[.]com[.]br)
stalkerware-indicators
Sep 24, 2026
1000967PTS STALKERWARE BrunoEspiao (im[.]brunoespiao[.]com[.]br)
stalkerware-indicators
Sep 24, 2026
1000966PTS STALKERWARE BrunoEspiao (brunoespiao[.]com[.]br)
stalkerware-indicators
Sep 24, 2026
1000965PTS STALKERWARE BrunoEspiao (brunoespiao[.]com)
stalkerware-indicators
Sep 24, 2026
1000964PTS STALKERWARE BrunoEspiao (back[.]brunoespiao[.]com[.]br)
stalkerware-indicators
Sep 24, 2026
1000963PTS STALKERWARE MagMonitor (uf[.]maglook[.]eu)
stalkerware-indicators
Sep 24, 2026
1000962PTS STALKERWARE MagMonitor (ue[.]maglook[.]eu)
stalkerware-indicators
Sep 24, 2026
1000961PTS STALKERWARE MagMonitor (maglook[.]eu)
stalkerware-indicators
Sep 24, 2026
1000960PTS STALKERWARE MagMonitor (www[.]maglook[.]eu)
stalkerware-indicators
Sep 24, 2026
1000959PTS STALKERWARE FindMyKids (where-is-my-children[.]firebase[.]io)
stalkerware-indicators
Sep 24, 2026
1000958PTS STALKERWARE FindMyKids (wss[.]findmykids[.]org)
stalkerware-indicators
Sep 24, 2026
1000957PTS STALKERWARE FindMyKids (r[.]findmykids[.]org)
stalkerware-indicators
Sep 24, 2026
1000956PTS STALKERWARE FindMyKids (api[.]findmykids[.]org)
stalkerware-indicators
Sep 24, 2026
1000955PTS STALKERWARE WiseMo (mtracker[.]fortess[.]net)
stalkerware-indicators
Sep 24, 2026
1000954PTS STALKERWARE WiseMo (mycloud1[.]wisemo[.]com)
stalkerware-indicators
Sep 24, 2026
1000953PTS STALKERWARE WiseMo (mycloud[.]wisemo[.]com)
stalkerware-indicators
Sep 24, 2026
1000952PTS STALKERWARE WheresMyDroid (wmdcommander[.]appspot[.]com)
stalkerware-indicators
Sep 24, 2026
1000951PTS STALKERWARE OneSpy (sse[.]chyldmonitor[.]com)
stalkerware-indicators
Sep 24, 2026
1000950PTS STALKERWARE OneSpy (web[.]chyldmonitor[.]com)
stalkerware-indicators
Sep 24, 2026
1000949PTS STALKERWARE OneSpy (android[.]chyldmonitor[.]com)
stalkerware-indicators
Sep 24, 2026
1000948PTS STALKERWARE OneSpy (onespy-in-196211[.]firebaseio[.]com)
stalkerware-indicators
Sep 24, 2026
1000947PTS STALKERWARE OneSpy (api[.]cp[.]onemonitar[.]com)
stalkerware-indicators
Sep 24, 2026
1000946PTS STALKERWARE MySpyApps (my-spy-a9c92[.]firebaseio[.]com)
stalkerware-indicators
Sep 24, 2026
SID: 2072258
et/open
ET MALWARE Portuguese JS Dropper Payload Request
Sep 24, 2026
SID: 2072257
et/open
ET ATTACK_RESPONSE Observed Portuguese JS Dropper Inbound M3
Sep 24, 2026
SID: 2072256
et/open
ET MALWARE Observed Win32/Lumma Stealer Related Domain (sectionobligationpow .site) in TLS SNI
Sep 24, 2026
SID: 2072255
et/open
ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sectionobligationpow .site)
Sep 24, 2026
SID: 2072254
et/open
ET MALWARE TA569 Gholoader CnC Domain in TLS SNI (sso .ebeenj .com)
Sep 24, 2026
SID: 2072253
et/open
ET MALWARE TA569 Gholoader CnC Domain in DNS Lookup (sso .ebeenj .com)
Sep 24, 2026
SID: 1000989
stalkerware-indicators
PTS STALKERWARE Msafely (tun-cos-1258344701[.]file[.]myqcloud[.]com)
Sep 24, 2026
SID: 1000988
stalkerware-indicators
PTS STALKERWARE Msafely (strapi[.]msafely[.]com)
Sep 24, 2026
SID: 1000987
stalkerware-indicators
PTS STALKERWARE Msafely (strapi[.]spyx[.]com)
Sep 24, 2026
SID: 1000986
stalkerware-indicators
PTS STALKERWARE Msafely (strapi[.]spyphone[.]cc)
Sep 24, 2026
SID: 1000985
stalkerware-indicators
PTS STALKERWARE Spynger (mob-app-gw[.]spynger[.]net)
Sep 24, 2026
SID: 1000984
stalkerware-indicators
PTS STALKERWARE Spynger (ios-gw[.]spynger[.]net)
Sep 24, 2026
SID: 1000983
stalkerware-indicators
PTS STALKERWARE Spynger (my[.]spynger[.]net)
Sep 24, 2026
SID: 1000982
stalkerware-indicators
PTS STALKERWARE PhoneMonitor (users[.]thephonem[.]com)
Sep 24, 2026
SID: 1000981
stalkerware-indicators
PTS STALKERWARE 201[.]33[.]21[.]62 (stalkerware)
Sep 24, 2026
SID: 1000980
stalkerware-indicators
PTS STALKERWARE eagleSPY (eaglespy[.]com[.]br)
Sep 24, 2026
SID: 1000979
stalkerware-indicators
PTS STALKERWARE Spyone (laucass[.]forumactif[.]org)
Sep 24, 2026
SID: 1000978
stalkerware-indicators
PTS STALKERWARE Spyone (ur[.]spyone[.]pl)
Sep 24, 2026
SID: 1000977
stalkerware-indicators
PTS STALKERWARE Spyone (pc[.]spyone[.]pl)
Sep 24, 2026
SID: 1000976
stalkerware-indicators
PTS STALKERWARE BrunoEspiao (brunoespiao2[.]s3[.]amazonaws[.]com)
Sep 24, 2026
SID: 1000975
stalkerware-indicators
PTS STALKERWARE BrunoEspiao (www[.]brunoespiao[.]com[.]br)
Sep 24, 2026
SID: 1000974
stalkerware-indicators
PTS STALKERWARE BrunoEspiao (ur[.]brunoespiao[.]com[.]br)
Sep 24, 2026
SID: 1000973
stalkerware-indicators
PTS STALKERWARE BrunoEspiao (uf1[.]brunoespiao[.]com[.]br)
Sep 24, 2026
SID: 1000972
stalkerware-indicators
PTS STALKERWARE BrunoEspiao (uf[.]brunoespiao[.]com[.]br)
Sep 24, 2026
SID: 1000971
stalkerware-indicators
PTS STALKERWARE BrunoEspiao (ue[.]brunoespiao[.]com[.]br)
Sep 24, 2026
SID: 1000970
stalkerware-indicators
PTS STALKERWARE BrunoEspiao (ua[.]brunoespiao[.]com[.]br)
Sep 24, 2026
SID: 1000969
stalkerware-indicators
PTS STALKERWARE BrunoEspiao (pc1[.]brunoespiao[.]com[.]br)
Sep 24, 2026
SID: 1000968
stalkerware-indicators
PTS STALKERWARE BrunoEspiao (pc[.]brunoespiao[.]com[.]br)
Sep 24, 2026
SID: 1000967
stalkerware-indicators
PTS STALKERWARE BrunoEspiao (im[.]brunoespiao[.]com[.]br)
Sep 24, 2026
SID: 1000966
stalkerware-indicators
PTS STALKERWARE BrunoEspiao (brunoespiao[.]com[.]br)
Sep 24, 2026
SID: 1000965
stalkerware-indicators
PTS STALKERWARE BrunoEspiao (brunoespiao[.]com)
Sep 24, 2026
SID: 1000964
stalkerware-indicators
PTS STALKERWARE BrunoEspiao (back[.]brunoespiao[.]com[.]br)
Sep 24, 2026
SID: 1000963
stalkerware-indicators
PTS STALKERWARE MagMonitor (uf[.]maglook[.]eu)
Sep 24, 2026
SID: 1000962
stalkerware-indicators
PTS STALKERWARE MagMonitor (ue[.]maglook[.]eu)
Sep 24, 2026
SID: 1000961
stalkerware-indicators
PTS STALKERWARE MagMonitor (maglook[.]eu)
Sep 24, 2026
SID: 1000960
stalkerware-indicators
PTS STALKERWARE MagMonitor (www[.]maglook[.]eu)
Sep 24, 2026
SID: 1000959
stalkerware-indicators
PTS STALKERWARE FindMyKids (where-is-my-children[.]firebase[.]io)
Sep 24, 2026
SID: 1000958
stalkerware-indicators
PTS STALKERWARE FindMyKids (wss[.]findmykids[.]org)
Sep 24, 2026
SID: 1000957
stalkerware-indicators
PTS STALKERWARE FindMyKids (r[.]findmykids[.]org)
Sep 24, 2026
SID: 1000956
stalkerware-indicators
PTS STALKERWARE FindMyKids (api[.]findmykids[.]org)
Sep 24, 2026
SID: 1000955
stalkerware-indicators
PTS STALKERWARE WiseMo (mtracker[.]fortess[.]net)
Sep 24, 2026
SID: 1000954
stalkerware-indicators
PTS STALKERWARE WiseMo (mycloud1[.]wisemo[.]com)
Sep 24, 2026
SID: 1000953
stalkerware-indicators
PTS STALKERWARE WiseMo (mycloud[.]wisemo[.]com)
Sep 24, 2026
SID: 1000952
stalkerware-indicators
PTS STALKERWARE WheresMyDroid (wmdcommander[.]appspot[.]com)
Sep 24, 2026
SID: 1000951
stalkerware-indicators
PTS STALKERWARE OneSpy (sse[.]chyldmonitor[.]com)
Sep 24, 2026
SID: 1000950
stalkerware-indicators
PTS STALKERWARE OneSpy (web[.]chyldmonitor[.]com)
Sep 24, 2026
SID: 1000949
stalkerware-indicators
PTS STALKERWARE OneSpy (android[.]chyldmonitor[.]com)
Sep 24, 2026
SID: 1000948
stalkerware-indicators
PTS STALKERWARE OneSpy (onespy-in-196211[.]firebaseio[.]com)
Sep 24, 2026
SID: 1000947
stalkerware-indicators
PTS STALKERWARE OneSpy (api[.]cp[.]onemonitar[.]com)
Sep 24, 2026
SID: 1000946
stalkerware-indicators
PTS STALKERWARE MySpyApps (my-spy-a9c92[.]firebaseio[.]com)
Sep 24, 2026