Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE MuddyWater Payload CnC Checkin rev 2 2020-08-31
suricata ET PHISHING Generic Goth Phishing Landing rev 2 2020-08-31
suricata ET MALWARE ICEFOG-P Variant CnC Checkin M2 rev 2 2020-08-31
suricata ET ADWARE_PUP Theinstalls.com Initial Checkin rev 7 2020-08-31
suricata ET ADWARE_PUP SoundCloud Downloader Install Beacon rev 4 2020-08-31
suricata ET ADWARE_PUP W32/MediaGet.Adware Installer Download rev 8 2020-08-31
suricata ET ADWARE_PUP Common Adware Library ISX User Agent Detected rev 5 2020-08-31
suricata ET ADWARE_PUP RogueAntiSpyware.AntiVirusPro Checkin rev 4 2020-08-31
suricata ET ADWARE_PUP W32/AdLoad.Downloader Download rev 5 2020-08-31
suricata ET ADWARE_PUP Adware.Gen5 Reporting rev 6 2020-08-31
suricata ET ADWARE_PUP Security-updater.com Spyware Posting Data rev 7 2020-08-31
suricata ET PHISHING Possible Phishing Landing - Zeus365 Encoding rev 3 2020-08-31
suricata ET ADWARE_PUP W32/LoudMo.Adware Checkin rev 5 2020-08-31
suricata ET ADWARE_PUP 2020search/PowerSearch Toolbar Adware/Spyware - GET rev 7 2020-08-31
suricata ET ADWARE_PUP Sidetab or Related Trojan Checkin rev 3 2020-08-31
suricata ET ADWARE_PUP Downloader Checkin - Downloads Rogue Adware rev 9 2020-08-31
suricata ET ADWARE_PUP Generic Adware Install Report rev 7 2020-08-31
suricata ET PHISHING Cloned Yahoo Page - Possible Phishing Landing rev 2 2020-08-31
suricata ET PHISHING Successful Generic Credit Card Information Phish 2019-06-04 rev 2 2020-08-31
suricata ET PHISHING Cloned Telekom / Tmobile Page - Possible Phishing Landing rev 2 2020-08-31
suricata ET MALWARE Win32/Vools Variant CnC Checkin rev 2 2020-08-31
suricata ET PHISHING Cloned Discover Page - Possible Phishing Landing rev 2 2020-08-31
suricata ET ADWARE_PUP Dropspam.com Spyware Reporting rev 7 2020-08-31
suricata ET ADWARE_PUP MAC/Conduit Component Download rev 4 2020-08-31
suricata ET PHISHING Cloned South State Bank Page - Possible Phishing Landing rev 2 2020-08-31
suricata ET ADWARE_PUP Elitemediagroup.net Spyware Config Download rev 7 2020-08-31
suricata ET ADWARE_PUP W32/InstallRex.Adware Initial CnC Beacon rev 4 2020-08-31
suricata ET ADWARE_PUP OSX/Fake Flash Player Download Oct 20 rev 4 2020-08-31
suricata ET PHISHING Generic Phishing Panel Accessed on External Server rev 2 2020-08-31
suricata ET ADWARE_PUP W32/MediaGet Checkin rev 5 2020-08-31
snort ET TROJAN C3Pool CoinMiner Setup Script Download rev 2 2020-08-28
snort ET CURRENT_EVENTS Fedex Phishing Landing on Appspot Hosting rev 2 2020-08-28
snort ET TROJAN MassLogger Client Data Exfil SMTP rev 3 2020-08-28
suricata ET MALWARE Outbound POST Request with Base64 ps PowerShell Command Output M1 rev 3 2020-08-28
suricata ET MALWARE Outbound POST Request with Base64 ps PowerShell Command Output M3 rev 3 2020-08-28
suricata ET MALWARE MSIL/SkidRat User-Agent Observed rev 2 2020-08-28
suricata ET MALWARE MassLogger Client Data Exfil SMTP rev 3 2020-08-28
suricata ET MALWARE Outbound POST Request with Base64 ps PowerShell Command Output M2 rev 3 2020-08-28
suricata ET MALWARE MSIL/CoinMiner Performing System Checkin rev 1 2020-08-28
suricata ET MALWARE PS/Beapy CnC Checkin rev 4 2020-08-28