Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Scarlet Mimic DNS Lookup 44 rev 7 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 24 rev 6 2024-04-13
suricata ET PHISHING Successful Yahoo Phish M1 2016-06-15 rev 9 2024-04-13
suricata ET MALWARE Formbook 0.3 Checkin rev 8 2024-04-13
suricata ET PHISHING Successful DHL Phish 2016-12-08 rev 7 2024-04-13
suricata ET PHISHING Successful Apple Store Phish M4 2016-12-29 rev 6 2024-04-13
suricata ET ADWARE_PUP my247eshop .com User-Agent rev 9 2024-04-13
suricata ET MALWARE Ransomware Locky .onion Payment Domain rev 5 2024-04-13
suricata ET ADWARE_PUP [PTsecurity] WebToolbar.Win32.Searchbar.k HTTP JSON Artifact rev 4 2024-04-13
suricata ET PHISHING Successful Zimbra Account Phish 2015-10-23 rev 7 2024-04-13
suricata ET PHISHING Successful US Bank Phish 2016-06-09 M1 rev 5 2024-04-13
suricata ET PHISHING Successful Chase Phish M1 2016-10-17 rev 6 2024-04-13
suricata ET PHISHING Successful Email Credential Phish 2015-08-12 rev 6 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup msonlinelive.com rev 6 2024-04-13
suricata ET PHISHING Successful Free.fr Phish 2016-03-10 rev 6 2024-04-13
suricata ET PHISHING Successful Yahoo Phish 2016-10-27 rev 7 2024-04-13
suricata ET PHISHING Successful Generic Phish 2016-09-08 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2016-09-09 rev 5 2024-04-13
suricata ET MALWARE XCodeGhost DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Yahoo Phish 2016-10-25 rev 5 2024-04-13
suricata ET PHISHING Successful Apple Phish 2015-10-23 rev 6 2024-04-13
suricata ET MALWARE Pteranodon Variant 1 Backdoor Checkin rev 5 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 26 rev 6 2024-04-13
suricata ET USER_AGENTS Suspicious User-Agent Mozilla/3.0 rev 11 2024-04-13
suricata ET PHISHING Successful Wildblue/CenturyLink Phish 2015-12-08 rev 7 2024-04-13
suricata ET PHISHING Possible Successful Hostinger Generic Phish Jun 09 2017 rev 5 2024-04-13
suricata ET PHISHING Successful Personalized Email Phish 2016-07-22 rev 9 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 19 rev 6 2024-04-13
suricata ET MALWARE Possible Winnti-related DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Amazon Phish M1 2016-10-05 rev 5 2024-04-13
suricata ET ADWARE_PUP Loadmoney Checkin 2 rev 11 2024-04-13
suricata ET PHISHING Successful Apple Phish 2016-09-27 rev 5 2024-04-13
suricata ET MALWARE MICROPSIA HTTP Failover Reporting Infected System Information and RAT Version rev 4 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup microsofi.org rev 7 2024-04-13
suricata ET PHISHING Successful Apple Phish M3 2016-09-29 rev 6 2024-04-13
suricata ET PHISHING Successful EDF Account Phish 2015-09-01 rev 5 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup adawareblock.com rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2016-08-31 rev 5 2024-04-13
suricata ET PHISHING Successful Yahoo Phish 2016-12-08 rev 7 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish 2016-10-21 rev 5 2024-04-13