Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Bank of America Phish 2016-12-05 rev 7 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-10-14 rev 6 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET MALWARE IXWARE Stealer CnC Activity rev 3 2024-04-13
suricata ET PHISHING Successful Alibaba Phish 2016-09-28 rev 6 2024-04-13
suricata ET WEB_SERVER DNS Query for Suspicious 54dfa1cb.com Domain - Anuna Checkin - Compromised PHP Site rev 7 2024-04-13
suricata ET PHISHING Successful View Invoice Phish M1 2016-10-05 rev 7 2024-04-13
suricata ET MALWARE CDT Credphish/Netwire Campaign DNS Lookup rev 6 2024-04-13
suricata ET INFO Wget Request for Executable rev 5 2024-04-13
suricata ET PHISHING Successful Ebay Phish M2 2016-12-29 rev 7 2024-04-13
suricata ET MALWARE Observed SluttyPutty Maldoc User-Agent rev 4 2024-04-13
suricata ET PHISHING Successful iTunes Connect Phish M1 2016-12-13 rev 7 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 45 rev 6 2024-04-13
suricata ET EXPLOIT Multiple Router RCE Routersploit rev 4 2024-04-13
suricata ET MALWARE Possible SKyWIper/Win32.Flame POST rev 9 2024-04-13
suricata ET PHISHING Successful Zimbra Account Phish 2015-10-23 rev 7 2024-04-13
suricata ET PHISHING Successful Password Protected AMEX Phish 2016-12-09 rev 6 2024-04-13
suricata ET ADWARE_PUP Best-targeted-traffic.com Spyware Checkin rev 10 2024-04-13
suricata ET PHISHING Successful Gmail Phish M2 2016-09-29 rev 7 2024-04-13
suricata ET PHISHING Successful WeTransfer Phish Oct 04 2016 rev 5 2024-04-13
suricata ET PHISHING Successful Vmware/Zimbra Phish 2015-09-28 rev 7 2024-04-13
suricata ET PHISHING Successful Telstra Phish M1 2015-09-05 rev 6 2024-04-13
suricata ET PHISHING Successful Chase Phish 2016-10-07 rev 8 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2016-08-31 rev 5 2024-04-13
suricata ET MALWARE Ransomware Locky .onion Payment Domain rev 5 2024-04-13
suricata ET MALWARE Known Sinkhole Response Header INetSim rev 6 2024-04-13
suricata ET PHISHING Successful Apple Phish M2 2016-09-29 rev 6 2024-04-13
suricata ET PHISHING Successful Email Credential Phish 2015-08-12 rev 6 2024-04-13
suricata ET PHISHING Successful Apple Store Phish M4 2016-12-29 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 2016-12-05 rev 8 2024-04-13
suricata ET PHISHING Successful Excel Phish Aug 15 2016 rev 6 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 8 rev 6 2024-04-13
suricata ET PHISHING Successful Generic Phish 2020-09-21 rev 3 2024-04-13
suricata ET PHISHING Successful Apple Phish 2015-10-23 rev 6 2024-04-13
suricata ET PHISHING Successful Impots.gouv.fr Phish 2016-10-24 rev 7 2024-04-13
suricata ET PHISHING Successful Bank of America Phish 2016-10-14 rev 9 2024-04-13
suricata ET EXPLOIT Possible Linksys E1500/E2500 apply.cgi RCE Attempt rev 4 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 23 rev 6 2024-04-13
suricata ET PHISHING Successful Generic Phish 2016-09-08 rev 7 2024-04-13
suricata ET ADWARE_PUP my247eshop .com User-Agent rev 9 2024-04-13