Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE DNS Query for Cloud Atlas blackberry-support.herokuapp.com rev 7 2024-04-13
suricata ET MALWARE MICROPSIA HTTP Failover Reporting Infected System Information and RAT Version rev 4 2024-04-13
suricata ET PHISHING Successful Postbank Online Banking Phish M1 2016-09-30 rev 5 2024-04-13
suricata ET PHISHING Successful Generic Phish Phish 2018-08-21 rev 3 2024-04-13
suricata ET MALWARE [PTsecurity] Possible Backdoor.Win32.TeamBot / RTM C2 Response rev 3 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2016-08-31 rev 5 2024-04-13
suricata ET MALWARE Possible Winnti-related DNS Lookup rev 6 2024-04-13
suricata ET ADWARE_PUP my247eshop .com User-Agent rev 9 2024-04-13
suricata ET PHISHING Successful EDF Account Phish 2015-09-01 rev 5 2024-04-13
suricata ET MALWARE Pteranodon Variant 1 Backdoor Checkin rev 5 2024-04-13
suricata ET MALWARE APT32 Komprogo DNS Lookup rev 7 2024-04-13
suricata ET PHISHING Successful Apple Phish 2015-10-23 rev 6 2024-04-13
suricata ET PHISHING Successful Personalized DHL Phish 2016-10-12 rev 7 2024-04-13
suricata ET ADWARE_PUP Loadmoney Checkin 2 rev 11 2024-04-13
suricata ET ADWARE_PUP Loadmoney.A Checkin 6 rev 10 2024-04-13
suricata ET MALWARE MICROPSIA HTTP Failover CnC Checkin rev 4 2024-04-13
suricata ET PHISHING Successful Generic Phish 2016-09-08 rev 7 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 19 rev 6 2024-04-13
suricata ET SCAN Apache mod_proxy Reverse Proxy Exposure 2 rev 7 2024-04-13
suricata ET PHISHING Successful Excel Phish Aug 15 2016 rev 6 2024-04-13
suricata ET INFO Wget Request for Executable rev 5 2024-04-13
suricata ET MALWARE Win32.Small.qh/xSock User-Agent Detected rev 9 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-10-12 rev 8 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET PHISHING Successful Alibaba Phish 2016-09-28 rev 6 2024-04-13
suricata ET PHISHING Successful Citizenbank Phish 2016-05-24 M1 rev 5 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish 2016-08-31 rev 7 2024-04-13
suricata ET MALWARE OSX/Proton.B DNS Lookup rev 7 2024-04-13
suricata ET PHISHING Successful Webmail Account Upgrade Phish 2016-07-15 rev 7 2024-04-13
suricata ET PHISHING Possible Successful Google Drive Phish M1 2015-07-28 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 Sep 15 2017 rev 4 2024-04-13
suricata ET PHISHING Successful Email Credential Phish 2015-08-12 rev 6 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup adawareblock.com rev 7 2024-04-13
suricata ET INFO Windows Mobile 7.0 User-Agent detected rev 9 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup msonlinelive.com rev 6 2024-04-13
suricata ET MALWARE CDT Credphish/Netwire Campaign DNS Lookup rev 6 2024-04-13
suricata ET MALWARE Win32/Krypton Stealer CnC Checkin rev 5 2024-04-13
suricata ET PHISHING Successful Email Login Phish 2016-06-02 rev 6 2024-04-13
suricata ET PHISHING Successful Free.fr Phish 2016-03-10 rev 6 2024-04-13