Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_CLIENT Fake Adobe Flash Player malware binary requested rev 3 2019-08-16
snort ET WEB_CLIENT Microsoft Tech Support Phone Scam M2 Jul 07 2017 rev 2 2019-08-16
snort ET WEB_CLIENT Fake AV Phone Scam Landing June 16 2015 M4 rev 2 2019-08-16
snort ET TROJAN Outbound POST Request with ps PowerShell Command Output rev 3 2019-08-16
snort ET TROJAN Clipsa Stealer - Coinminer Download rev 2 2019-08-16
snort ET WEB_CLIENT Tech Support Scam Landing 2018-07-18 rev 3 2019-08-16
snort ET TROJAN Clipsa Stealer - CnC Checkin rev 2 2019-08-16
snort ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2019-08-16
snort ET WEB_CLIENT Tech Support Phone Scam Landing 2017-07-26 rev 3 2019-08-16
snort ET WEB_CLIENT Tech Support Phone Scam Landing Jun 29 M3 rev 2 2019-08-16
snort ET WEB_CLIENT Fake AV Phone Scam Landing Apr 4 rev 2 2019-08-16
snort ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2019-08-16
snort ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2019-08-16
snort ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2019-08-16
snort ET WEB_CLIENT Fake AV Phone Scam Landing June 26 2015 M5 rev 2 2019-08-16
snort ET WEB_CLIENT Tech Support Scam Landing M1 2019-04-15 rev 3 2019-08-16
snort ET TROJAN Aurora Ransomware CnC Checkin rev 4 2019-08-16
snort ET WEB_CLIENT Fake AV Phone Scam Landing June 11 2015 M1 rev 3 2019-08-16
snort ET WEB_CLIENT Generic Fake Support Phone Scam Mar 9 M3 rev 2 2019-08-16
snort ET WEB_CLIENT Microsoft Tech Support Scam Landing M1 Oct 13 2017 rev 3 2019-08-16
snort ET WEB_CLIENT Tech Support Phone Scam Landing M1 Oct 16 2016 rev 3 2019-08-16
snort ET TROJAN Clipsa Stealer - Exfiltration Activity rev 2 2019-08-16
snort ET WEB_CLIENT Fake AV Phone Scam Landing July 20 2015 M4 rev 2 2019-08-16
snort ET WEB_CLIENT DRIVEBY FakeSupport - URI - windows-firewall.png rev 2 2019-08-16
snort ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2019-08-16
snort ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2019-08-16
snort ET TROJAN [TGI] Py.Machete HTTP CnC Exfil rev 4 2019-08-16
snort ET EXPLOIT Joomla 3.2.1 SQL injection attempt rev 2 2019-08-16
snort ET WEB_CLIENT DRIVEBY FakeUpdate - URI - /styles/javaupdate.css rev 2 2019-08-16
suricata ET MALWARE [TGI] Py.Machete FTP Exfil 1 rev 3 2019-08-16
suricata ET MALWARE [TGI] Py.Machete FTP Exfil 2 rev 3 2019-08-16
snort ET TROJAN Dridex DL Pattern Feb 18 2016 rev 2 2019-08-15
snort ET CURRENT_EVENTS Generic 302 Redirect to Phishing Landing rev 2 2019-08-15
snort ET EXPLOIT QNAP Shellshock script retrieval rev 2 2019-08-15
snort ET MOBILE_MALWARE Possible Android InMobi SDK SideDoor Access takeCameraPicture rev 2 2019-08-15
snort ET MOBILE_MALWARE Possible Android CVE-2014-6041 rev 3 2019-08-15
snort ET MOBILE_MALWARE Possible Android InMobi SDK SideDoor Access postToSocial rev 2 2019-08-15
snort ET MOBILE_MALWARE Possible Android InMobi SDK SideDoor Access sendSMS rev 2 2019-08-15
snort ET MOBILE_MALWARE Possible Android InMobi SDK SideDoor Access sendMail rev 2 2019-08-15
snort ET MOBILE_MALWARE Possible Android InMobi SDK SideDoor Access getGalleryImage rev 3 2019-08-15