Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET INFO Data Submitted to Weebly.com - Possible Phishing rev 1 2015-11-10
snort ET CURRENT_EVENTS Weebly Phishing Landing Observed 2015-11-10 rev 1 2015-11-10
snort ET TROJAN Wrapper/Gholee/Wedex Checkin rev 1 2015-11-09
snort ET CURRENT_EVENTS Likely Evil EXE download from MSXMLHTTP non-exe extension M2 rev 2 2015-11-09
snort ET CURRENT_EVENTS Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 rev 2 2015-11-09
snort ET CURRENT_EVENTS AES Crypto Observed in Javascript - Possible Phishing Landing rev 2 2015-11-06
snort ET CURRENT_EVENTS Obfuscated Phishing Landing 2015-11-05 rev 1 2015-11-05
snort ET CURRENT_EVENTS Successful UPS Phish 2015-11-05 rev 1 2015-11-05
snort ET CURRENT_EVENTS Outlook WebApp Phish Landing 2015-11-05 rev 1 2015-11-05
snort ET TROJAN JS/Nemucod.M.gen requesting EXE payload 2015-11-02 rev 1 2015-11-05
snort ET TROJAN JS/Nemucod.M.gen requesting PDF payload 2015-11-02 rev 1 2015-11-05
snort ET CURRENT_EVENTS Possible vBulletin object injection vulnerability Attempt rev 1 2015-11-05
snort ET CURRENT_EVENTS Successful LCL Bank Phish 2015-11-05 rev 1 2015-11-05
snort ET CURRENT_EVENTS Successful Dropbox Phish 2015-11-04 rev 1 2015-11-04
snort ET TROJAN Silent Miner Changelog Checkin rev 1 2015-11-04
snort ET SCAN Arachni Scanner Web Scan rev 4 2015-11-04
snort ET CURRENT_EVENTS Successful Paypal Phish 2015-11-03 M4 rev 1 2015-11-04
snort ET CURRENT_EVENTS Successful Paypal Phish 2015-11-03 M3 rev 1 2015-11-04
snort ET TROJAN Cybergate/Rebhip/Spyrat Backdoor Keepalive rev 12 2015-11-04
snort ET VOIP H.323 in Q.931 Call Setup - Inbound rev 1 2015-11-03
snort ET CURRENT_EVENTS Successful Zimbra Phish 2015-11-03 rev 1 2015-11-03
snort ET CURRENT_EVENTS Successful NatWest Bank Phish 2015-11-03 rev 1 2015-11-03
snort ET CURRENT_EVENTS Successful Chase Phish 2015-11-03 rev 1 2015-11-03
snort ET VOIP Possible Misuse Call from MERA RTU rev 1 2015-11-03
snort ET CURRENT_EVENTS Successful Paypal Account Phish 2015-10-30 3 rev 1 2015-11-02
snort ET CURRENT_EVENTS Successful Zimbra Phish 2015-10-30 rev 2 2015-11-02
snort ET CURRENT_EVENTS Successful Paypal Account Phish Oct 30 rev 2 2015-11-02
snort ET CURRENT_EVENTS Successful Paypal Account Phish 2015-10-30 2 rev 1 2015-11-02
snort ET CURRENT_EVENTS Possible Malicious Redirect Leading to EK Oct 29 rev 2 2015-10-29
snort ET CURRENT_EVENTS Successful Paypal Phish 2015-10-28 rev 1 2015-10-28
snort ET CURRENT_EVENTS Successful Docusign Phish 2015-10-28 rev 1 2015-10-28
snort ET CURRENT_EVENTS Successful Paypal Phish 2015-10-29 rev 1 2015-10-28
snort ET CURRENT_EVENTS Successful Paypal Phish 2015-10-28 3 rev 1 2015-10-28
snort ET CURRENT_EVENTS Successful IBC Bank Phish 2015-10-29 rev 1 2015-10-28
snort ET TROJAN LuminosityLink - Data Channel Server Response rev 1 2015-10-26
snort ET TROJAN LuminosityLink - Data Channel Client Request rev 1 2015-10-26
snort ET TROJAN Backdoor.Win32.DarkComet Screenshot Upload Successful rev 1 2015-10-23
snort ET CURRENT_EVENTS Successful Paypal Phish 2015-10-23 rev 1 2015-10-23
snort ET CURRENT_EVENTS Successful Paypal Phish 2015-10-23 rev 1 2015-10-23
snort ET CURRENT_EVENTS Successful Paypal Phish 2015-10-23 rev 1 2015-10-23