Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MOBILE_MALWARE Android Syria-Twitter Checkin rev 5 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish 2021-03-16 rev 3 2024-04-13
suricata ET ADWARE_PUP Win32/GameHack.DJC CnC Activity rev 3 2024-04-13
suricata ET PHISHING Successful Paypal Phish M3 2016-10-06 rev 7 2024-04-13
suricata ET ADWARE_PUP Xpire.info Spyware Install Reporting rev 14 2024-04-13
suricata ET MALWARE CDT Credphish/Netwire Campaign DNS Lookup rev 6 2024-04-13
suricata ET ADWARE_PUP SearchProtect PUA User-Agent Observed rev 5 2024-04-13
suricata ET MALWARE DeepEnd Research Ransomware CrypMIC Payment Onion Domain rev 6 2024-04-13
suricata ET WEB_SERVER Jorgee Scan rev 7 2024-04-13
suricata ET MALWARE Zbot .onion Proxy Domain rev 6 2024-04-13
suricata ET ADWARE_PUP Successful QuizScope Installation rev 5 2024-04-13
suricata ET MALWARE Lazarus Decafett DNS Lookup 2 rev 6 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET PHISHING Successful Webmail Validator Phish M1 2016-09-02 rev 7 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish M1 2016-12-29 rev 7 2024-04-13
suricata ET PHISHING Successful Bank of America Phish 2016-10-03 rev 6 2024-04-13
suricata ET PHISHING Successful Adobe Shared Document Phish 2016-11-15 rev 6 2024-04-13
suricata ET PHISHING Successful Office 365 Phish 2016-11-18 rev 7 2024-04-13
suricata ET PHISHING Successful Banco do Brasil Phish M2 Sep 29 2017 rev 4 2024-04-13
suricata ET PHISHING Successful 163.com Email Account Phish 2016-10-26 rev 5 2024-04-13
suricata ET PHISHING Successful Wells Fargo Mobile Phish 2016-08-01 M2 rev 5 2024-04-13
suricata ET EXPLOIT AVTECH Authenticated Command Injection in PwdGrp.cgi rev 4 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 2016-11-29 rev 8 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup azureon-line.com rev 7 2024-04-13
suricata ET ADWARE_PUP OSX ADWARE/AD Injector rev 6 2024-04-13
suricata ET INFO External IP Lookup - iplocation .truevue .org rev 5 2024-04-13
suricata ET MALWARE Turla SHIRIME DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Suspicious Byethost Phishing Redirect 2016-10-04 rev 5 2024-04-13
suricata ET PHISHING Successful Yahoo Phish 2016-07-11 rev 6 2024-04-13
suricata ET PHISHING Successful Carribean International Bank Account Phish 2015-08-25 rev 6 2024-04-13
suricata ET WEB_SERVER DataCha0s Web Scanner/Robot rev 42 2024-04-13
suricata ET EXPLOIT Netgear Multiple Router Auth Bypass rev 5 2024-04-13
suricata ET PHISHING Successful Chase Phish 2016-10-25 rev 5 2024-04-13
suricata ET PHISHING Successful OX App Suite Phish 2017-10-12 rev 5 2024-04-13
suricata ET PHISHING Successful LCL Bank Phish 2015-11-05 rev 7 2024-04-13
suricata ET MALWARE OSX/KeRanger Ransomware CnC DNS Request 4 rev 5 2024-04-13
suricata ET MALWARE WSHRAT Keylogger Module Download Command Inbound rev 4 2024-04-13
suricata ET PHISHING Successful Linkedin Phish 2016-09-27 rev 7 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup checkwinframe.com rev 7 2024-04-13
suricata ET MALWARE Operation Tripoli Related CnC Checkin rev 4 2024-04-13