Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS Am3Refh Obfuscated Phishing Landing 2016-02-23 rev 2 2017-10-12
snort ET CURRENT_EVENTS Successful PayPal Phish Dec 19 2012 rev 3 2017-10-12
snort ET TROJAN [PTsecurity] Ursnif Encoded Payload Inbound rev 2 2017-10-12
snort ET CURRENT_EVENTS Adobe Online Document Phishing Landing 2016-05-02 rev 2 2017-10-12
snort ET CURRENT_EVENTS Successful Wells Fargo Phish 2016-05-26 rev 2 2017-10-12
snort ET CURRENT_EVENTS Shipping Document Phishing Landing 2016-06-23 rev 2 2017-10-12
snort ET CURRENT_EVENTS Chase/Bank of America Phishing Landing Uri Structure Nov 27 2012 rev 2 2017-10-12
snort ET CURRENT_EVENTS Successful Adobe Shared Document Phishing 2015-11-20 rev 3 2017-10-12
snort ET CURRENT_EVENTS Apple Phishing Landing Jan 30 2014 rev 2 2017-10-12
snort ET WEB_CLIENT Anonisma Phishing CSS 2015-12-29 rev 2 2017-10-12
snort ET CURRENT_EVENTS Successful PayPal Phish Nov 30 2012 rev 3 2017-10-12
snort ET CURRENT_EVENTS Possible Successful Phish - Generic POST to myform.php Feb 01 2013 rev 2 2017-10-12
snort ET CURRENT_EVENTS Adobe Phishing Landing 2016-03-10 rev 2 2017-10-12
snort ET CURRENT_EVENTS Successful Bank of America Phish M1 Oct 01 2012 rev 3 2017-10-12
snort ET CURRENT_EVENTS Possible Successful Verified by Visa Phish Jan 30 2014 rev 5 2017-10-12
snort ET CURRENT_EVENTS Successful Mailbox Shutdown Phish M1 2016-05-16 rev 2 2017-10-11
snort ET CURRENT_EVENTS SUSPICIOUS DOC Download from commonly abused file share site rev 2 2017-10-11
snort ET CURRENT_EVENTS Successful Mailbox Shutdown Phish M3 2016-05-16 rev 2 2017-10-11
snort ET POLICY PsExec service created rev 3 2017-10-11
snort ET CURRENT_EVENTS Successful Yahoo Phish 2016-07-11 rev 2 2017-10-11
snort ET CURRENT_EVENTS Successful Linkedin Phish 2016-11-17 rev 4 2017-10-11
snort ET CURRENT_EVENTS Successful Mailbox Shutdown Phish M2 2016-05-16 rev 2 2017-10-11
snort ET CURRENT_EVENTS Possible Successful *.myjino. ru Phish 2016-12-16 rev 3 2017-10-10
snort ET CURRENT_EVENTS Successful Phish to Compromised Wordpress Site 2016-03-23 rev 3 2017-10-10
snort ET CURRENT_EVENTS Successful Chase Phish 2015-09-24 rev 2 2017-10-10
snort ET CURRENT_EVENTS Possible barclays .co. uk Phishing Domain 2016-06-22 rev 3 2017-10-10
snort ET CURRENT_EVENTS Successful Chase Phish 2015-09-24 rev 2 2017-10-10
snort ET CURRENT_EVENTS Successful Chase Phish 2015-09-23 rev 2 2017-10-10
snort ET TROJAN Andromeda Check-in Response rev 4 2017-10-09
snort ET CURRENT_EVENTS Possible Amazon Phishing Domain 2016-06-21 rev 2 2017-10-06
snort ET CURRENT_EVENTS Successful Apple Suspended Account Phish M2 Aug 09 2016 rev 3 2017-10-06
snort ET CURRENT_EVENTS Possible USAA Phishing Domain Mar 14 2016 rev 3 2017-10-06
snort ET CURRENT_EVENTS Successful Phish Outlook Credentials Oct 01 2015 rev 3 2017-10-06
snort ET CURRENT_EVENTS Possible Apple Phishing Domain 2016-06-14 rev 2 2017-10-06
snort ET CURRENT_EVENTS Possible HMRC Phishing Domain 2016-06-08 rev 2 2017-10-06
snort ET CURRENT_EVENTS Possible Cartasi Phishing Domain Nov 08 2016 rev 2 2017-10-06
snort ET CURRENT_EVENTS Successful Bank of Oklahoma Phish M1 Jul 21 2016 rev 3 2017-10-06
snort ET CURRENT_EVENTS Successful Bank of Oklahoma Phish M2 Jul 21 2016 rev 3 2017-10-06
snort ET EXPLOIT Likely Struts S2-053-CVE-2017-12611 Exploit Attempt M1 rev 1 2017-10-06
snort ET CURRENT_EVENTS Successful Bank of America Phish 2016-12-05 rev 3 2017-10-06