Sigma

Stories with published Sigma detection rules, reproduced exactly as written, ready to convert for your SIEM.

1 story matches your filters.

HighCVE-2023-30799CVE-2023-32315 6 Hunt LeadsSigma IOCs Remote Attacker Doorway CloudSEK

Doorway Botnet Walks Into MikroTik Routers With Blank Passwords

CloudSEK says the Doorway botnet compromised 11,363 routers, cameras and servers in a month, mostly via blank or default passwords on MikroTik routers plus old RouterOS and Openfire bugs.

Oct 30, 2026