@an0rma1: I looked into horspool-and-friends but it didn't want to work very well with nibble wildcards in the minimal time I spent on it. It might be worth looking into, but I doubt anyone is ever going to run into huge performance issues with a tool like this.
Yara uses Aho-Corasick for pattern finding.