Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS Successful Google Drive Phish 2016-10-12 rev 2 2016-12-19
snort ET TROJAN TeleBots VBS Backdoor CnC Beacon 2 rev 1 2016-12-16
snort ET CURRENT_EVENTS Successful Linkedin Phish 2016-11-18 rev 2 2016-12-16
snort ET WEB_CLIENT Microsoft Edge SmartScreen Page Spoof Attempt Dec 16 2016 rev 1 2016-12-16
snort ET CURRENT_EVENTS Mailbox Deactivation Phishing Landing 2016-12-15 rev 1 2016-12-15
snort ET CURRENT_EVENTS Successful Mailbox Deactivation Phish 2016-12-15 rev 1 2016-12-15
snort ET CURRENT_EVENTS Successful Paypal Phish M2 2016-10-06 rev 2 2016-12-15
snort ET TROJAN TeleBots BCS-server User-Agent rev 1 2016-12-15
snort ET TROJAN TeleBots VBS Backdoor CnC Beacon 1 rev 1 2016-12-15
snort ET TROJAN TeleBots BCS-server CnC Beacon rev 1 2016-12-15
snort ET CURRENT_EVENTS Successful Tesco Bank Phish M1 Phish 2016-12-15 rev 1 2016-12-15
snort ET CURRENT_EVENTS Successful Discover Phish M2 2016-12-14 rev 1 2016-12-14
snort ET CURRENT_EVENTS Successful Discover Phish M3 2016-12-14 rev 1 2016-12-14
snort ET INFO Noction IRP Probe rev 1 2016-12-14
snort ET CURRENT_EVENTS Successful iTunes Connect Phish M3 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful Paypal Phish M4 2016-12-13 rev 2 2016-12-13
snort ET CURRENT_EVENTS Successful Paypal Phish M3 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful iTunes Connect Phish M2 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful Telstra Refund Phish 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful Paypal Phish M1 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful Paypal Phish M5 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful Paypal Phish M2 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful Chase Phish 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful iTunes Connect Phish M1 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful Adobe Shared PDF Phish 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful Ebay Phish 2016-12-12 rev 1 2016-12-12
snort ET EXPLOIT Netgear R7000 Command Injection Exploit rev 2 2016-12-12
snort ET WEB_CLIENT Javascript XOR Encoding - Observed in Apple Phishing 2016-12-09 rev 1 2016-12-09
snort ET CURRENT_EVENTS Successful Password Protected AMEX Phish 2016-12-09 rev 2 2016-12-09
snort ET CURRENT_EVENTS Successful Linkedin Phish 2016-12-09 rev 1 2016-12-09
snort ET CURRENT_EVENTS Successful Stripe Phish 2016-12-09 rev 1 2016-12-09
snort ET CURRENT_EVENTS Successful Paypal Phish 2016-12-09 rev 1 2016-12-09
snort ET CURRENT_EVENTS Successful iCloud Phish Oct 10 2016 rev 2 2016-12-08
snort ET CURRENT_EVENTS Successful Yahoo Phish 2016-12-08 rev 1 2016-12-08
snort ET CURRENT_EVENTS Successful DHL Phish 2016-12-08 rev 1 2016-12-08
snort ET CURRENT_EVENTS Successful WhatsApp Phish M1 2016-12-07 rev 1 2016-12-07
snort ET CURRENT_EVENTS Successful WhatsApp Phish M2 2016-12-07 rev 1 2016-12-07
snort ET CURRENT_EVENTS Successful Google Drive Phish 2016-12-07 rev 1 2016-12-07
snort ET CURRENT_EVENTS Internet Explorer Information Disclosure Vuln as Observed in RIG EK Prefilter M1 Dec 06 rev 1 2016-12-06
snort ET CURRENT_EVENTS Internet Explorer Information Disclosure Vuln as Observed in RIG EK Prefilter M2 Dec 06 rev 1 2016-12-06