Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN [PTsecurity] DorkBot.Downloader CnC Beacon rev 3 2018-02-05
snort ET CURRENT_EVENTS Yahoo Account Verification Phishing Landing 2018-02-05 rev 2 2018-02-05
snort ET CURRENT_EVENTS Possible Generic Antibots Phishing Landing 2018-02-05 rev 2 2018-02-05
snort ET TROJAN [Flashpoint] Possible CVE-2018-4878 Check-in rev 3 2018-02-05
snort ET TROJAN [PTsecurity] DorkBot.Downloader CnC Response rev 3 2018-02-05
snort ET CURRENT_EVENTS Banque Populaire Phishing Landing 2018-02-05 rev 2 2018-02-05
snort ET CURRENT_EVENTS Wells Fargo Phishing Landing 2018-02-02 M9 rev 2 2018-02-02
snort ET CURRENT_EVENTS Wells Fargo Phishing Landing 2018-02-02 M5 rev 2 2018-02-02
snort ET EXPLOIT Possible MeltDown PoC Download In Progress rev 3 2018-02-02
snort ET CURRENT_EVENTS Wells Fargo Phishing Landing 2018-02-02 M7 rev 2 2018-02-02
snort ET EXPLOIT Possible Spectre PoC Download In Progress rev 3 2018-02-02
snort ET CURRENT_EVENTS Wells Fargo Phishing Landing 2018-02-02 M3 rev 2 2018-02-02
snort ET CURRENT_EVENTS Chalbhai Phishing Landing Oct 23 2017 rev 3 2018-02-02
snort ET CURRENT_EVENTS Wells Fargo Phishing Landing 2018-02-02 M6 rev 2 2018-02-02
snort ET CURRENT_EVENTS Wells Fargo Phishing Landing 2018-02-02 M2 rev 2 2018-02-02
snort ET CURRENT_EVENTS Microsoft Live Login Phishing Landing 2018-02-01 rev 2 2018-02-01
snort ET TROJAN Operation EvilTraffic Initial Redirect M1 rev 3 2018-02-01
snort ET CURRENT_EVENTS Wells Fargo Phishing Landing 2018-02-01 rev 2 2018-02-01
snort ET TROJAN Operation EvilTraffic Initial Redirect M2 rev 3 2018-02-01
snort ET CURRENT_EVENTS TSB Bank / Lloyds Bank Phishing Landing 2018-02-01 rev 2 2018-02-01
snort ET TROJAN DDoS Win32/Nitol.A Checkin rev 1 2018-02-01
snort ET CURRENT_EVENTS AT&T Phishing Landing 2018-01-23 rev 3 2018-02-01
snort ET TROJAN [PTsecurity] Botnet Nitol.B Checkin rev 3 2018-01-31
snort ET TROJAN Possible Sharik/Smoke Loader Microsoft Connectivity check rev 4 2018-01-31
snort ET CURRENT_EVENTS Paypal Phishing Landing 2018-01-31 rev 2 2018-01-31
snort ET CURRENT_EVENTS Hellion Postmaster Phishing Landing 2018-01-31 rev 2 2018-01-31
snort ET CURRENT_EVENTS Bank of America Phishing Landing 2018-01-30 rev 2 2018-01-30
snort ET CURRENT_EVENTS Verizon Wireless Phishing Landing 2018-01-30 rev 2 2018-01-30
snort ET CURRENT_EVENTS GrandSoft EK IE Exploit Jan 30 2018 rev 1 2018-01-30
snort ET TROJAN Evrial Stealer CnC Activity rev 2 2018-01-30
snort ET CURRENT_EVENTS Turbotax Phishing Landing 2018-01-30 rev 2 2018-01-30
snort ET CURRENT_EVENTS Possible Capital One Phishing Landing - Title over non SSL rev 2 2018-01-30
snort ET MOBILE_MALWARE Android.Trojan.Marcher.U DNS Lookup rev 1 2018-01-30
snort ET CURRENT_EVENTS Impots.gouv.fr Phishing Landing 2018-01-30 rev 2 2018-01-30
snort ET CURRENT_EVENTS Microsoft Onedrive Phishing Landing 2018-01-29 rev 2 2018-01-29
snort ET CURRENT_EVENTS Generic Smail Phishing Landing 2018-01-29 rev 2 2018-01-29
snort ET CURRENT_EVENTS Paypal Phishing Landing 2018-01-29 rev 2 2018-01-29
snort ET CURRENT_EVENTS Smartsheet Phishing Landing 2018-01-29 rev 2 2018-01-29
snort ET CURRENT_EVENTS Mailbox Phishing Landing 2018-01-29 rev 2 2018-01-26
snort ET TROJAN W32/SchwSonne CnC Beacon M2 rev 1 2018-01-25