Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Wells Fargo Mobile Phish 2016-08-01 M1 rev 5 2024-04-13
suricata ET MALWARE CryptON/Nemesis/X3M Ransomware Onion Domain rev 6 2024-04-13
suricata ET MALWARE CDT Credphish/Netwire Campaign DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Canada Revenue Agency Phish 2015-08-18 rev 6 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2019-04-12 rev 5 2024-04-13
suricata ET MALWARE Formbook 0.3 Checkin rev 8 2024-04-13
suricata ET MALWARE TeslaCrypt/AlphaCrypt Payment DNS Lookup rev 5 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 2016-12-05 rev 8 2024-04-13
suricata ET MOBILE_MALWARE IOS_XAGENT UA rev 6 2024-04-13
suricata ET EXPLOIT Quanta LTE Router Information Disclosure Exploit Attempt rev 5 2024-04-13
suricata ET EXPLOIT Possible WebShell JPEG Upload rev 3 2024-04-13
suricata ET MALWARE Arkei Stealer IP Lookup rev 5 2024-04-13
suricata ET PHISHING Successful Adobe Online Account Phish 2015-08-21 rev 6 2024-04-13
suricata ET PHISHING Successful Excel Phish Aug 15 2016 rev 6 2024-04-13
suricata ET MALWARE APT28 Zebrocy/Zekapab POST Template Structure rev 4 2024-04-13
suricata ET MALWARE GoldenSpy CnC Activity rev 4 2024-04-13
suricata ET WEB_CLIENT Great Cannon DDoS JS M4 rev 5 2024-04-13
suricata ET EXPLOIT Belkin Wireless G Router DNS Change POST Request rev 8 2024-04-13
suricata ET USER_AGENTS EmailSiphon Suspicious User-Agent Inbound rev 5 2024-04-13
suricata ET PHISHING Successful Apple Store Phish M1 2016-12-29 rev 6 2024-04-13
suricata ET PHISHING Successful Anonisma Paypal Phish 2015-12-29 rev 6 2024-04-13
suricata ET MALWARE Ransomware Locky .onion Payment Domain rev 5 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup checkmalware.info rev 7 2024-04-13
suricata ET PHISHING L33bo Phishing Kit - Successful Credential Phish M1 2016-03-29 rev 6 2024-04-13
suricata ET PHISHING Successful Chase Phish 2016-10-07 rev 8 2024-04-13
suricata ET ADWARE_PUP Best-targeted-traffic.com Spyware Checkin rev 10 2024-04-13
suricata ET HUNTING Suspicious HTTP POST Only Containing Password - Possible Phishing rev 3 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET PHISHING Terse POST to Wordpress Folder - Probable Successful Phishing M6 rev 5 2024-04-13
suricata ET PHISHING Successful Citizenbank Phish 2016-05-24 M1 rev 5 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2020-01-10 rev 4 2024-04-13
suricata ET ADWARE_PUP [PTsecurity] WebToolbar.Win32.Searchbar.k HTTP JSON Artifact rev 4 2024-04-13
suricata ET PHISHING Possible Successful Google Drive Phish M1 2015-07-28 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Account Phish 2015-10-16 rev 7 2024-04-13
suricata ET MALWARE ABUSE.CH Locky Payment Domain Detected rev 5 2024-04-13
suricata ET PHISHING Successful Shipping Document Phish 2015-09-29 rev 8 2024-04-13
suricata ET USER_AGENTS Microsoft Device Metadata Retrieval Client User-Agent rev 5 2024-04-13
suricata ET MALWARE CryptON/Nemesis/X3M Ransomware Onion Domain rev 6 2024-04-13
suricata ET MALWARE ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET PHISHING Successful RBC Royal Bank Phish M2 Aug 17 2017 rev 4 2024-04-13