Fast and lightweight malware scanning

Malwatch is a malware scanner primarily designed for web server environments. It is battle proven and in production with some of the internet's busiest websites. Our objective is to offer a comparably better solution to commercial products, thereby empowering everyone to have good malware protection.

This repo stores community malware signatures kindly released by various vendors and individuals. Contributions are welcome and we greatly appreciate the community to review reported issues.

The usefulness of malwatch is proportionate to the signature base. Please consider sharing so that others may benefit.

Additional information regarding the project is available at https://github.com/defended-net/malwatch

Community

Join our Discord We would love to hear from you!

Documentation

Quick start guide, advanced usage, changelog and other resources for both users and developers are available at our Documentation

Website

https://defended.net

Acknowledgements

A special thank you to the following signature vendors:

• Nextron-Systems https://www.nextron-systems.com

Licence: https://creativecommons.org/licenses/by-nc/4.0/

Changes: Rule names and meta fields modified.

• R-fx Networks https://www.rfxn.com

Licence: GNU-GPLv2

Changes: Rule names and meta fields modified.

• Arnim Rupp

Licence: https://creativecommons.org/licenses/by-nc/4.0/

Changes: Rule names, conditions and meta fields modified.