Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Win32/Boaxxe.BR CnC Beacon rev 4 2015-09-08
snort ET CURRENT_EVENTS Successful USAA Phish 2015-09-05 rev 1 2015-09-05
snort ET CURRENT_EVENTS Successful DHL Account Phish 2015-11-03 rev 1 2015-09-04
snort ET TROJAN Win32/Reconyc.equo Checkin rev 2 2015-09-04
snort ET CURRENT_EVENTS Successful Outlook Webmail Account Phish 2015-09-02 rev 1 2015-09-02
snort ET CURRENT_EVENTS Double-Encoded Reverse Base64/Dean Edwards Packed JavaScript Observed in Unknown EK Feb 16 2015 b64 1 M2 rev 2 2015-09-02
snort ET CURRENT_EVENTS Successful Generic Phish - Phone Number 2015-09-02 rev 1 2015-09-01
snort ET CURRENT_EVENTS Successful EDF Account Phish 2015-09-01 rev 1 2015-09-01
snort ET CURRENT_EVENTS Successful Webmail Account Phish 2015-09-02 rev 1 2015-09-01
snort ET CURRENT_EVENTS Successful SFR Account Phish 2015-09-01 rev 1 2015-09-01
snort ET CURRENT_EVENTS Successful Google Drive Phish Sept 1 M2 2015-09-02 rev 1 2015-09-01
snort ET CURRENT_EVENTS RIG Landing URI Struct March 20 2015 rev 2 2015-09-01
snort ET CURRENT_EVENTS PawnStorm Sednit DL Aug 28 2015 rev 1 2015-08-28
snort ET CURRENT_EVENTS PawnStorm Java Class Stage 1 M1 Aug 28 2015 rev 1 2015-08-28
snort ET CURRENT_EVENTS PawnStorm Java Class Stage 2 M2 Aug 28 2015 rev 1 2015-08-28
snort ET CURRENT_EVENTS Magnitude/Hunter EK IE Exploit Aug 23 2015 rev 2 2015-08-28
snort ET CURRENT_EVENTS PawnStorm Java Class Stage 2 M1 Aug 28 2015 rev 1 2015-08-28
snort ET TROJAN AlphaCrypt CnC Beacon 3 rev 4 2015-08-27
snort ET TROJAN EvilGrab/Vidgrab Checkin rev 3 2015-08-26
snort ET GAMES MINECRAFT Server response inbound rev 1 2015-08-21
snort ET TROJAN Ixeshe/Mecklow Checkin 2 rev 5 2015-08-21
snort ET TROJAN Win32.VBKrypt.vquj Checkin rev 3 2015-08-19
snort ET TROJAN Hacking Team Elite Windows Implant Exfiltration rev 6 2015-08-18
snort ET TROJAN Hacking Team Android Implant Exfiltration rev 7 2015-08-18
snort ET EXPLOIT Websense Content Gateway submit_net_debug.cgi cmd_param Param Buffer Overflow Attempt rev 1 2015-08-18
snort ET TROJAN Hacking Team Scout Windows Implant Exfiltration rev 7 2015-08-18
snort ET TROJAN Hacking Team Implant Exfiltration rev 7 2015-08-18
snort ET EXPLOIT Possible Firefox PDF.js Same-Origin-Bypass CVE-2015-4495 M2 rev 1 2015-08-11
snort ET TROJAN Possible DarkHotel Landing M1 rev 1 2015-08-11
snort ET TROJAN DarkHotel Initial Beacon rev 1 2015-08-11
snort ET TROJAN Win32.Androm.gnlb Checkin rev 3 2015-08-11
snort ET EXPLOIT Possible Firefox PDF.js Same-Origin-Bypass CVE-2015-4495 M1 rev 1 2015-08-10
snort ET TROJAN W32/Alina.POS-Trojan Checkin rev 3 2015-08-05
snort ET TROJAN APT CozyCar SSL Cert 1 rev 2 2015-08-04
snort ET TROJAN Sakula/Mivast RAT CnC Beacon 7 rev 2 2015-08-01
snort ET TROJAN Sakula/Mivast RAT CnC Beacon 6 rev 1 2015-08-01
snort ET TROJAN URI Struct Observed in Pawn Storm CVE-2015-2950 rev 1 2015-07-31
snort ET TROJAN Potao CnC rev 1 2015-07-31
snort ET TROJAN Possible Java/Downloader Observed in Pawn Storm CVE-2015-2590 1 rev 1 2015-07-31
snort ET TROJAN Possible Java/Downloader Observed in Pawn Storm CVE-2015-2590 2 rev 1 2015-07-31