Cado Security (via Open-Source-YARA-rules)

Repository

https://github.com/mikesxrs/Open-Source-YARA-rules

Commit

ec0056f767db98bf6d5fd63877ad51fb54d350e9

Retrieved

2026-09-27

Licence

No licence (all rights reserved)

Published

Full text

Why

Unlicensed mirror repository, but each rule states license = "Apache License 2.0" in its meta: republished under Apache 2.0 per rule.

Download pack (.yar, 7 rules)

Rules from Cado Security (via Open-Source-YARA-rules)

• CADOSECURITY_Lambda_Malware

  Detects AWS Lambda Malware

  MalwareCado Security (via Open-Source-YARA-rules)· cdoman@cadosecurity.com· 2022-04-03
• CADOSECURITY_Linux_Wiper_AWFULSHRED

  Detects AWFULSHRED wiper used against Ukrainian ICS

  MalwareCado Security (via Open-Source-YARA-rules)· mmuir@cadosecurity.com· 2022-04-12
• CADOSECURITY_Linux_Wiper_SOLOSHRED

  Detects SOLOSHRED wiper used against Ukrainian ICS

  MalwareCado Security (via Open-Source-YARA-rules)· mmuir@cadosecurity.com· 2022-04-12
• CADOSECURITY_Linux_Worm_ORCSHRED

  Detects ORCSHRED worm used in attacks on Ukrainian ICS

  MalwareCado Security (via Open-Source-YARA-rules)· mmuir@cadosecurity.com· 2022-04-12
• CADOSECURITY_Powershell_Downloader_POWERGAP

  Detects POWERGAP downloader used against Ukrainian ICS

  MalwareCado Security (via Open-Source-YARA-rules)· mmuir@cadosecurity.com· 2022-04-12
• CADOSECURITY_Wiper_Ukr_Feb_2022

  Detects Wiper seen in Ukraine 23rd Feb 2022

  MalwareCado Security (via Open-Source-YARA-rules)· cadosecurity.com· 2022-02-23
• CADOSECURITY_Whispergate_Stage_1

  Detects first stage payload from WhisperGate

  MalwareCado Security (via Open-Source-YARA-rules)· mmuir@cadosecurity.com· 2022-01-17