Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Backdoor.Graybird Checkin rev 7 2024-04-13
suricata ET ADWARE_PUP W32/BettrExperience.Adware POST Checkin rev 7 2024-04-13
suricata ET MALWARE APT32 Komprogo DNS Lookup rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-10-23 rev 7 2024-04-13
suricata ET PHISHING Successful Bank of America Phish 2016-12-05 rev 7 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET PHISHING Successful Ebay Phish M2 2016-12-29 rev 7 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup adawareblock.com rev 7 2024-04-13
suricata ET MALWARE Possible Winnti-related DNS Lookup rev 6 2024-04-13
suricata ET MALWARE IXWARE Stealer CnC Activity rev 3 2024-04-13
suricata ET PHISHING Successful Postbank Online Banking Phish M1 2016-09-30 rev 5 2024-04-13
suricata ET MALWARE MICROPSIA HTTP Failover Reporting Infected System Information and RAT Version rev 4 2024-04-13
suricata ET MALWARE MICROPSIA HTTP Failover CnC Checkin rev 4 2024-04-13
suricata ET PHISHING Successful Linkedin Phish 2016-10-12 rev 7 2024-04-13
suricata ET MALWARE Pteranodon Variant 1 Backdoor Checkin rev 5 2024-04-13
suricata ET EXPLOIT HiSilicon DVR - Buffer Overflow in Builtin Web Server rev 5 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 11 rev 6 2024-04-13
suricata ET USER_AGENTS Suspicious User-Agent Possible Trojan Downloader Shell rev 13 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 2016-12-05 rev 7 2024-04-13
suricata ET MALWARE [PTsecurity] Possible Backdoor.Win32.TeamBot / RTM C2 Response rev 3 2024-04-13
suricata ET MALWARE Possible Rar'd Malware sent when remote host claims to send an Image rev 10 2024-04-13
suricata ET ADWARE_PUP Sogou Toolbar Checkin rev 10 2024-04-13
suricata ET PHISHING Successful Generic Phish Phish 2018-08-21 rev 3 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-09-02 rev 5 2024-04-13
suricata ET PHISHING Successful Generic Webmail Phish M1 2016-11-18 rev 6 2024-04-13
suricata ET PHISHING Successful Windows Live Account Phish 2016-10-26 rev 6 2024-04-13
suricata ET USER_AGENTS MSIL/Peppy User-Agent rev 4 2024-04-13
suricata ET WEB_SPECIFIC_APPS Jenkins RCE CVE-2019-1003000 rev 6 2024-04-13
suricata ET EXPLOIT Netgear WNDR Router DNS Change POST Request rev 7 2024-04-13
suricata ET PHISHING Successful Hotmail Phish 2016-09-29 rev 7 2024-04-13
suricata ET ADWARE_PUP PCAcceleratePro PUA/Adware User-Agent rev 7 2024-04-13
suricata ET MALWARE APT32 Komprogo DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Apple ID Phish 2016-10-25 rev 5 2024-04-13
suricata ET PHISHING Successful Barclays Phish M1 2016-09-09 rev 6 2024-04-13
suricata ET MALWARE Possible Winnti-related DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Santander Bank Phish 2016-10-28 rev 7 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 2016-09-29 rev 7 2024-04-13
suricata ET SCAN DirBuster Web App Scan in Progress rev 8 2024-04-13
suricata ET PHISHING Successful Apple Phish M2 2015-12-02 rev 8 2024-04-13