Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Account Update Phish 2015-09-01 rev 6 2024-04-13
suricata ET PHISHING Successful DHL Phish 2015-11-14 rev 6 2024-04-13
suricata ET PHISHING Successful Workspace Phish 2016-01-26 rev 7 2024-04-13
suricata ET PHISHING Successful National Bank Phish Jan 05 2017 rev 6 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 4 rev 6 2024-04-13
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher DNS Lookup rev 6 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 6 2024-04-13
suricata ET ADWARE_PUP Adware.Win32/SProtector.A Client Checkin rev 7 2024-04-13
suricata ET PHISHING Successful Bank of America Phish M4 2016-10-27 rev 6 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 3 rev 6 2024-04-13
suricata ET PHISHING Successful NatWest Bank Phish 2015-11-03 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Account Phish 2015-10-30 2 rev 5 2024-04-13
suricata ET PHISHING Successful Amazon Account Phish 2015-08-21 rev 6 2024-04-13
suricata ET PHISHING Successful WhatsApp Payment Phish M1 2016-11-15 rev 7 2024-04-13
suricata ET MOBILE_MALWARE DNS Trojan-Banker.AndroidOS.Marcher.i Query rev 6 2024-04-13
suricata ET PHISHING Successful Tradekey Phish 2015-11-19 rev 7 2024-04-13
suricata ET MALWARE Glupteba CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET MALWARE W32/Hyteod.Downloader CnC Beacon rev 6 2024-04-13
suricata ET PHISHING Successful Generic Mailbox Phish 2019-03-07 rev 3 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-11-18 rev 7 2024-04-13
suricata ET ADWARE_PUP Luxsoft Win32/ICLoader User-Agent rev 7 2024-04-13
suricata ET MALWARE Possible Winnti-related DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful USAA Phish 2015-10-20 rev 7 2024-04-13
suricata ET PHISHING Successful HM Revenue & Customs Phish M2 Apr 07 2017 rev 5 2024-04-13
suricata ET PHISHING Suspicious Fake Login - Possible Phishing - 2018-12-31 rev 4 2024-04-13
suricata ET PHISHING Possible Successful Apple Phish 2015-07-30 rev 6 2024-04-13
suricata ET MALWARE Known IoT Malware Domain rev 6 2024-04-13
suricata ET PHISHING Successful AOL Phish M1 2016-07-14 rev 6 2024-04-13
suricata ET MALWARE Likely CryptoWall 2.0 .onion Proxy domain lookup rev 5 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2016-10-06 rev 7 2024-04-13
suricata ET MALWARE ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET MALWARE Lazarus Decafett DNS Lookup 1 rev 6 2024-04-13
suricata ET PHISHING Successful Outlook Web App Phish 2015-10-15 rev 5 2024-04-13
suricata ET MALWARE MSIL/BlackGuard Stealer Variant Exfil via Telegram rev 4 2024-04-13
suricata ET PHISHING Successful USAA Phish 2016-08-30 rev 7 2024-04-13
suricata ET PHISHING Monzo Credential Phish Landing Page 2022-02-17 rev 3 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 47 rev 6 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 34 rev 6 2024-04-13
suricata ET MALWARE Critroni Variant .onion Proxy Domain rev 5 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13