Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Synchronize Email Account Phish 2016-06-15 rev 7 2024-04-13
suricata ET PHISHING Successful DHL Phish 2016-08-11 rev 7 2024-04-13
suricata ET PHISHING Successful Microsoft Account Phish 2019-01-29 rev 3 2024-04-13
suricata ET DOS Bittorrent User-Agent inbound - possible DDOS rev 5 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 25 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 2016-11-17 rev 7 2024-04-13
suricata ET WEB_CLIENT Great Cannon DDoS JS M3 rev 5 2024-04-13
suricata ET MALWARE Zhelatin npopup Update Detected rev 7 2024-04-13
suricata ET PHISHING Successful Bank of America Phish 2015-10-29 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 Dec 8 2015 rev 8 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2019-04-26 rev 4 2024-04-13
suricata ET PHISHING Successful Apple ID Phish M2 2016-10-04 rev 7 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Femas.b Apps List Exfil rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 2016-10-05 rev 7 2024-04-13
suricata ET MALWARE Glupteba CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET ADWARE_PUP Win32/Agent.NDV Receiving Task Config File rev 5 2024-04-13
suricata ET PHISHING Successful Netflix Phish 2016-10-12 rev 7 2024-04-13
suricata ET PHISHING Successful Chase Phish M2 2015-12-01 rev 7 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 13 rev 6 2024-04-13
suricata ET PHISHING Successful Account Update Phish 2016-09-06 rev 6 2024-04-13
suricata ET MALWARE Banker PWS/Infostealer HTTP GET Checkin rev 11 2024-04-13
suricata ET PHISHING Successful Shipping Document Phish 2015-09-29 rev 8 2024-04-13
suricata ET PHISHING Successful Postbank Online Banking Phish M2 2016-09-30 rev 5 2024-04-13
suricata ET PHISHING Successful Impots.gouv.fr Phish 2016-10-31 rev 5 2024-04-13
suricata ET PHISHING Successful Wells Fargo Account Phish 2015-08-18 rev 7 2024-04-13
suricata ET EXPLOIT Hootoo TripMate Attempted Remote Command Injection Inbound rev 4 2024-04-13
suricata ET MALWARE Covenant Framework Default HTTP Beacon rev 3 2024-04-13
suricata ET WEB_SERVER DNS Query for Suspicious 9507c4e8.com Domain - Anuna Checkin - Compromised PHP Site rev 7 2024-04-13
suricata ET PHISHING Successful Dropbox Business Phish 2016-11-17 rev 5 2024-04-13
suricata ET EXPLOIT Possible Vacron NVR Remote Command Execution rev 5 2024-04-13
suricata ET PHISHING Successful Blackboard Account Phish 2015-10-08 rev 6 2024-04-13
suricata ET PHISHING Successful Impots.gouv.fr Phish 2016-10-24 rev 7 2024-04-13
suricata ET MALWARE OSX/Proton.B DNS Lookup rev 7 2024-04-13
suricata ET MALWARE ServHelper CnC Inital Checkin rev 4 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 17 rev 6 2024-04-13
suricata ET MALWARE Cryptolocker .onion Proxy Domain rev 6 2024-04-13
suricata ET PHISHING Successful iTunes Connect Phish M1 2016-12-13 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-12-05 rev 6 2024-04-13
suricata ET MALWARE Glupteba CnC Domain in DNS Lookup rev 4 2024-04-13