PTS STALKERWARE MySpyApps (my-spy-a9c92[.]firebaseio[.]com)

SID: 1000946Rev: 1Enabled2 views
Filesuricata.rules
CreatedSeptember 24, 2026
UpdatedSeptember 24, 2026
Classificationtargeted-activity
alert dns $HOME_NET any -> any any (msg:"PTS STALKERWARE MySpyApps (my-spy-a9c92[.]firebaseio[.]com)"; metadata:type stalkerware; dns.query; content:"my-spy-a9c92.firebaseio.com"; depth:27; nocase; endswith; fast_pattern; reference:url,github.com/AssoEchap/stalkerware-indicators; classtype:targeted-activity; sid:1000946; rev:1;)

References

urlgithub.com/AssoEchap/stalkerware-indicators

Metadata

typestalkerware

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!