Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET MALWARE Cayosin Botnet User-Agent Observed M1 rev 6 2024-04-13
suricata ET MALWARE DeepEnd Research Ransomware CrypMIC Payment Onion Domain rev 6 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup secnetcontrol.com rev 7 2024-04-13
suricata ET ADWARE_PUP W32/Amonetize.Downloader Executable Download Request rev 7 2024-04-13
suricata ET MALWARE TeslaCrypt/AlphaCrypt Variant .onion Proxy Domain rev 5 2024-04-13
suricata ET MALWARE Ransomware Locky .onion Payment Domain rev 5 2024-04-13
suricata ET PHISHING L33bo Phishing Kit - Successful Credential Phish M2 2016-03-29 rev 6 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 25 rev 6 2024-04-13
suricata ET MALWARE Spora Ransomware DNS Query rev 6 2024-04-13
suricata ET MALWARE WindowsEnterpriseSuite FakeAV get_product_domains.php rev 7 2024-04-13
suricata ET MALWARE Win32/Filecoder.STOP Variant Public Key Download rev 5 2024-04-13
suricata ET INFO Python-urllib/ Suspicious User Agent rev 10 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 7 rev 6 2024-04-13
suricata ET MALWARE Glupteba CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET MALWARE CryptON/Nemesis/X3M Ransomware Onion Domain rev 6 2024-04-13
suricata ET USER_AGENTS EmailSiphon Suspicious User-Agent Inbound rev 5 2024-04-13
suricata ET MALWARE APT28 Zebrocy/Zekapab POST Template Structure rev 4 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish M5 2016-12-13 rev 5 2024-04-13
suricata ET MALWARE ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Account Phish 2015-10-16 rev 7 2024-04-13
suricata ET WEB_CLIENT Fake AV Phone Scam Landing Apr 4 rev 8 2024-04-13
suricata ET PHISHING Successful Paypal Phish Mar 22 2017 rev 5 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2015-09-22 rev 8 2024-04-13
suricata ET PHISHING Successful AOL Phish M3 2016-07-14 rev 6 2024-04-13
suricata ET USER_AGENTS pxyscand/ Suspicious User Agent Outbound rev 5 2024-04-13
suricata ET PHISHING Successful Personalized OWA Webmail Phish Oct 04 2016 rev 5 2024-04-13
suricata ET EXPLOIT Belkin Wireless G Router DNS Change POST Request rev 8 2024-04-13
suricata ET PHISHING Successful Anonisma Paypal Phish 2015-12-29 rev 6 2024-04-13
suricata ET PHISHING L33bo Phishing Kit - Successful Credential Phish M1 2016-03-29 rev 6 2024-04-13
suricata ET MALWARE DeepEnd Research Ransomware CrypMIC Payment Onion Domain rev 6 2024-04-13
suricata ET MALWARE Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET MALWARE Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13
suricata ET PHISHING Successful Google Drive Phish M1 2016-09-01 rev 6 2024-04-13
suricata ET MALWARE GoldenSpy CnC Activity rev 4 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 2016-11-29 rev 8 2024-04-13
suricata ET EXPLOIT_KIT TDS Sutra - redirect received rev 6 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2015-09-04 rev 8 2024-04-13