Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Apple Suspended Account Phish M2 Aug 09 2016 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 2016-09-29 rev 7 2024-04-13
suricata ET USER_AGENTS Microsoft Device Metadata Retrieval Client User-Agent rev 5 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-01-12 rev 7 2024-04-13
suricata ET ADWARE_PUP PUP W32/DownloadGuide.D rev 5 2024-04-13
suricata ET PHISHING Successful Battle.net Phish 2015-09-22 rev 5 2024-04-13
suricata ET MALWARE Gamaredon CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 2016-11-17 rev 7 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 1 rev 6 2024-04-13
suricata ET PHISHING Successful National Australia Bank 2016-09-28 rev 7 2024-04-13
suricata ET PHISHING Generic Personalized Google Firebase Hosted Phishing Landing rev 3 2024-04-13
suricata ET PHISHING Successful Canada Revenue Agency Phish 2016-08-30 rev 6 2024-04-13
suricata ET EXPLOIT Netgear WNDR Router DNS Change POST Request rev 7 2024-04-13
suricata ET MALWARE APT32 Komprogo DNS Lookup rev 6 2024-04-13
suricata ET INFO Wget Request for Executable rev 5 2024-04-13
suricata ET PHISHING Successful American Express Phish M1 2016-10-31 rev 5 2024-04-13
suricata ET PHISHING Successful Apple Phish 2019-12-18 rev 3 2024-04-13
suricata ET PHISHING Successful Generic Phish Phish 2018-08-21 rev 3 2024-04-13
suricata ET MALWARE ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 7 2024-04-13
suricata ET PHISHING Terse POST to Wordpress Folder - Probable Successful Phishing M3 rev 5 2024-04-13
suricata ET PHISHING Successful Bank of America Phish M1 2016-10-27 rev 5 2024-04-13
suricata ET PHISHING Successful Postbank Online Banking Phish M1 2016-09-30 rev 5 2024-04-13
suricata ET MALWARE Lazarus Decafett DNS Lookup 4 rev 6 2024-04-13
suricata ET PHISHING Successful Excel Online Phish 2016-10-05 rev 9 2024-04-13
suricata ET WEB_SERVER DNS Query for Suspicious 54dfa1cb.com Domain - Anuna Checkin - Compromised PHP Site rev 7 2024-04-13
suricata ET PHISHING Successful Commonwealth Bank Phish 2015-08-20 rev 6 2024-04-13
suricata ET MALWARE CDT Credphish/Netwire Campaign DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Apple Phish 2015-10-23 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-12-05 rev 6 2024-04-13
suricata ET PHISHING Successful Generic Phish 2020-09-21 rev 3 2024-04-13
suricata ET PHISHING Successful Password Protected AMEX Phish 2016-12-09 rev 6 2024-04-13
suricata ET MALWARE CryptON/Nemesis/X3M Ransomware Onion Domain rev 6 2024-04-13
suricata ET PHISHING Successful Wells Fargo Mobile Phish 2016-08-01 M1 rev 5 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 Sep 15 2017 rev 4 2024-04-13
suricata ET MALWARE Backdoor.Graybird Checkin rev 7 2024-04-13
suricata ET MALWARE OSX/KeRanger Ransomware CnC DNS Request 2 rev 5 2024-04-13
suricata ET PHISHING Successful Formbuddy Credential Phish Submission 2016-01-15 rev 6 2024-04-13
suricata ET EXPLOIT Quanta LTE Router Information Disclosure Exploit Attempt rev 5 2024-04-13
suricata ET PHISHING Successful Phish OWA Credentials 2016-08-16 rev 6 2024-04-13