Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Possible Winnti-related Destination rev 3 2020-08-13
suricata ET PHISHING Adobe Online Document Phishing Landing 2016-05-02 rev 4 2020-08-13
suricata ET PHISHING Raiffeisen Phishing Domain Nov 03 2017 rev 3 2020-08-13
suricata ET ADWARE_PUP Win32/Onescan FraudWare User-Agent rev 5 2020-08-13
suricata ET MALWARE Possible Winnti-related Destination rev 3 2020-08-13
suricata ET MALWARE Possible Winnti-related Destination rev 3 2020-08-13
suricata ET PHISHING Successful iTunes Phish Mar 21 2014 rev 6 2020-08-13
suricata ET PHISHING Possible Successful Phish - Generic POST to myform.php Feb 01 2013 rev 4 2020-08-13
suricata ET MALWARE Possible Winnti-related Destination rev 3 2020-08-13
suricata ET INFO Possible Mobile Malware POST of IMSI International Mobile Subscriber Identity in URI rev 5 2020-08-12
suricata ET PHISHING Adobe Online Document Phishing Landing M1 Mar 25 2017 rev 4 2020-08-12
snort ET TROJAN Win32/Tofsee Pharma Spam Template Active - Outbound Email Spam rev 2 2020-08-11
suricata ET PHISHING Possible Successful Generic SSN Phish rev 6 2020-08-11
suricata ET PHISHING Successful Generic Credit Card Information Phish rev 5 2020-08-11
suricata ET PHISHING Possible Successful Yahoo Phish Nov 25 2013 rev 4 2020-08-11
suricata ET PHISHING Successful Generic PII Phish rev 4 2020-08-11
suricata ET PHISHING Possible Successful Yahoo Phish Nov 21 2012 rev 6 2020-08-11
suricata ET PHISHING Possible Successful Phish - Other Credentials Nov 25 2013 rev 4 2020-08-11
suricata ET PHISHING Possible Successful Gmail Phish Nov 25 2013 rev 4 2020-08-11
suricata ET PHISHING Possible Successful Phish - Other Credentials Nov 21 2012 rev 6 2020-08-11
suricata ET PHISHING Possible Successful AOL Phish Nov 21 2012 rev 5 2020-08-11
suricata ET PHISHING Possible Successful AOL Phish Nov 25 2013 rev 4 2020-08-11
suricata ET PHISHING Possible Successful Gmail Phish Nov 21 2012 rev 5 2020-08-11
suricata ET PHISHING Possible Successful Hotmail Phish Nov 21 2012 rev 5 2020-08-11
snort ET TROJAN APT Mustang Panda CnC Activity rev 2 2020-08-10
snort ET CURRENT_EVENTS Possible Apple Phishing Landing - Title over non SSL rev 3 2020-08-10
snort ET TROJAN Observed DCRat CnC Domain in TLS SNI rev 2 2020-08-10
snort ET CURRENT_EVENTS Possible CIBC Phishing Landing - Title over non SSL rev 3 2020-08-10
snort ET TROJAN Suspected USBFERRY CnC rev 3 2020-08-10
suricata ET PHISHING Possible Successful Generic Phish - Credit Card rev 4 2020-08-10
suricata ET PHISHING Possible Successful Generic Phish - Three Security Questions rev 4 2020-08-10
suricata ET PHISHING Possible Successful Remax Phish - Other Creds Jun 23 2015 rev 6 2020-08-10
suricata ET PHISHING Chase Mobile Phishing Landing M2 rev 3 2020-08-10
suricata ET PHISHING Successful Adobe Phish 2016-04-29 rev 5 2020-08-10
suricata ET PHISHING Possible Successful Remax Phish - Hotmail Creds Nov 25 2013 rev 4 2020-08-10
snort ET CURRENT_EVENTS Successful Bank of America Phish M2 2016-08-31 rev 3 2020-08-07
snort ET MALWARE DownLoadAdmin Activity rev 2 2020-08-07
snort ET CURRENT_EVENTS Successful Facebook Phish 2020-01-10 rev 3 2020-08-07
snort ET CURRENT_EVENTS Successful Facebook Phish 2019-08-29 rev 3 2020-08-07
snort ET CURRENT_EVENTS Successful Facebook Phish 2019-04-26 rev 3 2020-08-07