Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful FR Gmail Phish M2 2016-03-15 rev 7 2024-04-13
suricata ET PHISHING Possible Successful Google Drive Phish M1 2015-07-28 rev 6 2024-04-13
suricata ET PHISHING Successful Halifax Bank Phish M1 2015-12-10 rev 7 2024-04-13
suricata ET MOBILE_MALWARE WireX Botnet DNS Lookup rev 7 2024-04-13
suricata ET MALWARE DNS Query for Known Chewbacca CnC Server rev 6 2024-04-13
suricata ET ADWARE_PUP Best-targeted-traffic.com Spyware Checkin rev 10 2024-04-13
suricata ET PHISHING Successful Wells Fargo Mobile Phish 2016-08-01 M1 rev 5 2024-04-13
suricata ET MALWARE CryptON/Nemesis/X3M Ransomware Onion Domain rev 6 2024-04-13
suricata ET WEB_SERVER DNS Query for Suspicious 54dfa1cb.com Domain - Anuna Checkin - Compromised PHP Site rev 7 2024-04-13
suricata ET MALWARE Ransomware Locky .onion Payment Domain rev 5 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup msonlinelive.com rev 6 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2020-01-10 rev 4 2024-04-13
suricata ET MALWARE Cryptolocker .onion Proxy Domain rev 6 2024-04-13
suricata ET PHISHING Successful Blackboard Account Phish 2015-10-08 rev 6 2024-04-13
suricata ET MALWARE [PTsecurity] Possible Backdoor.Win32.TeamBot / RTM C2 Response rev 3 2024-04-13
suricata ET PHISHING Successful Apple Phish M1 2016-11-15 rev 5 2024-04-13
suricata ET PHISHING Successful Email Credential Phish 2015-08-12 rev 6 2024-04-13
suricata ET MALWARE Glupteba CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET INFO Windows Mobile 7.0 User-Agent detected rev 9 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 8 rev 6 2024-04-13
suricata ET PHISHING Successful Yahoo Phish 2016-12-08 rev 7 2024-04-13
suricata ET PHISHING Successful Apple Phish M2 2016-09-29 rev 6 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET PHISHING Successful Citizenbank Phish 2016-05-24 M1 rev 5 2024-04-13
suricata ET PHISHING Successful Generic Phish 2020-09-21 rev 3 2024-04-13
suricata ET HUNTING Suspicious TLS SNI Request for Root rev 3 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish 2016-08-31 rev 7 2024-04-13
suricata ET PHISHING Successful Free.fr Phish 2016-03-10 rev 6 2024-04-13
suricata ET ADWARE_PUP Loadmoney.A Checkin 6 rev 10 2024-04-13
suricata ET MALWARE Critroni Variant .onion Proxy Domain rev 5 2024-04-13
suricata ET INFO localtunnel Connection Setup Attempt rev 5 2024-04-13
suricata ET PHISHING Successful Workspace Phish 2016-01-26 rev 7 2024-04-13
suricata ET PHISHING Successful National Australia Bank 2016-09-28 rev 7 2024-04-13
suricata ET PHISHING Generic Personalized Google Firebase Hosted Phishing Landing rev 3 2024-04-13
suricata ET PHISHING Successful Canada Revenue Agency Phish 2016-08-30 rev 6 2024-04-13
suricata ET EXPLOIT Netgear WNDR Router DNS Change POST Request rev 7 2024-04-13
suricata ET MALWARE APT32 Komprogo DNS Lookup rev 6 2024-04-13
suricata ET MALWARE MICROPSIA HTTP Failover Response M2 rev 5 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 15 rev 6 2024-04-13
suricata ET ADWARE_PUP klm123.com Spyware User Agent rev 18 2024-04-13