Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Blockchain Account Phish Aug 19 2016 rev 7 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-01-12 rev 7 2024-04-13
suricata ET EXPLOIT Hootoo TripMate Attempted Remote Command Injection Outbound rev 4 2024-04-13
suricata ET MALWARE MSIL/KeyRedirEx Banker Receiving Exit Instruction rev 6 2024-04-13
suricata ET MALWARE Peppy/KeeOIL Google Connectivity Check rev 4 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET MALWARE Java Archive sent when remote host claims to send an image rev 7 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13
suricata ET PHISHING Successful Barclays Phish M1 2016-09-09 rev 6 2024-04-13
suricata ET USER_AGENTS Microsoft Device Metadata Retrieval Client User-Agent rev 5 2024-04-13
suricata ET PHISHING Successful Santander Bank Phish 2016-10-28 rev 7 2024-04-13
suricata ET PHISHING Successful Yahoo Phish 2016-09-27 rev 7 2024-04-13
suricata ET MALWARE Possible Winnti-related DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 2016-09-29 rev 7 2024-04-13
suricata ET MALWARE CryptON/Nemesis/X3M Ransomware Onion Domain rev 6 2024-04-13
suricata ET ADWARE_PUP LNKR CnC Activity M2 rev 5 2024-04-13
suricata ET PHISHING Successful Banco do Brasil Phish M2 2016-10-25 rev 5 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 6 rev 6 2024-04-13
suricata ET PHISHING Successful Apple Suspended Account Phish M2 Aug 09 2016 rev 7 2024-04-13
suricata ET PHISHING Successful DHL Phish 2016-10-18 rev 5 2024-04-13
suricata ET PHISHING Successful Generic Webmail Phish 2016-12-02 rev 7 2024-04-13
suricata ET MALWARE Possible Winnti-related DNS Lookup rev 6 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 27 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-10-28 3 rev 5 2024-04-13
suricata ET PHISHING Successful US Bank Phish M1 2015-12-22 rev 7 2024-04-13
suricata ET PHISHING Successful Apple Store Phish M2 2016-12-29 rev 6 2024-04-13
suricata ET MALWARE Chanitor Variant .onion Proxy Domain rev 5 2024-04-13
suricata ET PHISHING Successful Apple Phish 2016-10-05 rev 7 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 1 rev 6 2024-04-13
suricata ET PHISHING Successful Google Drive Phish M1 2016-12-02 rev 7 2024-04-13
suricata ET PHISHING Successful Facebook Mobile Phish 2017-08-15 rev 5 2024-04-13
suricata ET DOS Bittorrent User-Agent inbound - possible DDOS rev 5 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET PHISHING Successful Adobe Online Phish 2015-09-30 rev 7 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13
suricata ET PHISHING Successful Mailbox Shutdown Phish M1 2016-05-16 rev 6 2024-04-13
suricata ET MALWARE Win32.Agent.pt User-Agent Detected rev 9 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 2016-11-17 rev 7 2024-04-13
suricata ET MALWARE ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET ADWARE_PUP PUP Win32/AdWare.Sendori User-Agent rev 6 2024-04-13