Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Dropbox Phish 2016-05-16 rev 8 2024-04-13
suricata ET MALWARE TeslaCrypt/AlphaCrypt Variant .onion Proxy Domain rev 5 2024-04-13
suricata ET MALWARE Query to Known CnC Domain msnsolution.nicaze.net rev 9 2024-04-13
suricata ET PHISHING Successful Adobe Phish 2016-09-14 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 2016-10-06 rev 8 2024-04-13
suricata ET PHISHING Successful Anonisma Phish 2015-12-01 rev 7 2024-04-13
suricata ET EXPLOIT Possible WebShell JPEG Upload rev 3 2024-04-13
suricata ET PHISHING Successful HMRC Phish Oct 18 2017 rev 5 2024-04-13
suricata ET MOBILE_MALWARE Apple iPhone Implant - Upload Files rev 3 2024-04-13
suricata ET MALWARE ABUSE.CH Locky Payment Domain Detected rev 5 2024-04-13
suricata ET MALWARE Arkei Stealer IP Lookup rev 5 2024-04-13
suricata ET SCAN Apache mod_proxy Reverse Proxy Exposure 1 rev 5 2024-04-13
suricata ET PHISHING Successful Facebook Payment Phish M1 2016-09-29 rev 7 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 25 rev 6 2024-04-13
suricata ET MALWARE Cayosin Botnet User-Agent Observed M1 rev 6 2024-04-13
suricata ET MALWARE Possible Outbound WebShell JPEG rev 5 2024-04-13
suricata ET PHISHING Successful PDF Online Phish 2016-12-19 rev 8 2024-04-13
suricata ET PHISHING Successful View Invoice Phish M2 2016-10-05 rev 7 2024-04-13
suricata ET MALWARE ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET USER_AGENTS pxyscand/ Suspicious User Agent Outbound rev 5 2024-04-13
suricata ET SCAN DavTest WebDav Vulnerability Scanner Default User Agent Detected rev 7 2024-04-13
suricata ET PHISHING Successful Personalized OWA Webmail Phish Oct 04 2016 rev 5 2024-04-13
suricata ET PHISHING L33bo Phishing Kit - Successful Credential Phish M1 2016-03-29 rev 6 2024-04-13
suricata ET EXPLOIT Belkin Wireless G Router DNS Change POST Request rev 8 2024-04-13
suricata ET INFO DNS request for Monero mining pool rev 7 2024-04-13
suricata ET MALWARE Danabot UA Observed rev 4 2024-04-13
suricata ET HUNTING Suspicious POST to Wordpress Folder - Possible Successful Banking Phish rev 3 2024-04-13
suricata ET PHISHING Successful Excel Phish 2016-08-19 rev 7 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-10-11 rev 5 2024-04-13
suricata ET PHISHING Successful Anonisma Paypal Phish 2015-12-29 rev 6 2024-04-13
suricata ET PHISHING Successful SeniorPeopleMeet Phish M1 2016-09-14 rev 5 2024-04-13
suricata ET PHISHING Possible Successful Outlook Web App Phish 2016-12-28 rev 8 2024-04-13
suricata ET PHISHING Successful LCL Bank Phish 2015-11-05 rev 7 2024-04-13
suricata ET PHISHING Successful Docusign Phish 2016-11-17 rev 7 2024-04-13
suricata ET MALWARE Observed DNS Query to Known Fenrir Ransomware CnC Domain rev 6 2024-04-13
suricata ET PHISHING Successful Apple Store Phish M1 2016-12-29 rev 6 2024-04-13
suricata ET MALWARE CryptON/Nemesis/X3M Ransomware Onion Domain rev 6 2024-04-13
suricata ET PHISHING Successful AOL Phish M1 2016-07-14 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M3 2016-10-06 rev 7 2024-04-13
suricata ET MALWARE BalkanDoor CnC Checkin - Server Response rev 4 2024-04-13