Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Glupteba CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET ADWARE_PUP Xpire.info Spyware Install Reporting rev 14 2024-04-13
suricata ET MALWARE WSHRAT Keylogger Module Download Command Inbound rev 4 2024-04-13
suricata ET PHISHING Successful Chase Phish 2016-10-25 rev 5 2024-04-13
suricata ET MOBILE_MALWARE Android Syria-Twitter Checkin rev 5 2024-04-13
suricata ET ADWARE_PUP Win32/GameHack.DJC CnC Activity rev 3 2024-04-13
suricata ET PHISHING Successful Sparkasse Credential Phish M1 2022-04-13 rev 3 2024-04-13
suricata ET MALWARE CDT Credphish/Netwire Campaign DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful AOL Phish M3 2016-07-14 rev 6 2024-04-13
suricata ET USER_AGENTS ESET Installer rev 5 2024-04-13
suricata ET MALWARE ICEFOG-P Variant CnC Checkin M1 rev 3 2024-04-13
suricata ET MALWARE Cayosin Botnet User-Agent Observed M2 rev 6 2024-04-13
suricata ET PHISHING Successful Dropbox Phish 2016-05-16 rev 8 2024-04-13
suricata ET PHISHING Successful Impots.gouv.fr Phish M2 2015-08-21 rev 6 2024-04-13
suricata ET PHISHING Successful PDF Online Phish 2016-12-19 rev 8 2024-04-13
suricata ET MALWARE Zbot .onion Proxy Domain rev 6 2024-04-13
suricata ET MALWARE Glupteba CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET PHISHING Successful Alibaba Phish 2016-09-29 rev 6 2024-04-13
suricata ET PHISHING Successful DHL Phish 2015-09-30 rev 6 2024-04-13
suricata ET MALWARE CryptoWall/TeslaCrypt Payment Domain rev 6 2024-04-13
suricata ET PHISHING Successful Adobe Phish 2016-07-21 rev 6 2024-04-13
suricata ET MALWARE Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET PHISHING Successful Dropbox Phish 2016-10-25 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-12-24 M1 rev 5 2024-04-13
suricata ET MALWARE WSHRAT Credential Dump Module Download Command Inbound rev 4 2024-04-13
suricata ET EXPLOIT FCM-MB40 Attempted Remote Command Execution as Root rev 4 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful PHOEN!X Apple Phish M2 2015-12-29 rev 6 2024-04-13
suricata ET MALWARE CustomRAT DNS lookup rev 6 2024-04-13
suricata ET PHISHING Successful Ameli.fr Phish M2 Oct 26 2016-10-26 rev 6 2024-04-13
suricata ET PHISHING Possible Successful Google Drive Phish 2015-07-28 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 2016-10-05 rev 5 2024-04-13
suricata ET PHISHING Successful Apple Phish M2 Feb 06 2016 rev 6 2024-04-13
suricata ET PHISHING Successful Zimbra Phish 2015-10-30 rev 8 2024-04-13
suricata ET EXPLOIT_KIT BottleEK Landing rev 4 2024-04-13
suricata ET PHISHING Successful Gmail Phish M1 2016-10-12 rev 7 2024-04-13
suricata ET WEB_SERVER Binget PHP Library User Agent Inbound rev 5 2024-04-13
suricata ET MALWARE APT28 Zebrocy/Zekapab CnC Checkin rev 4 2024-04-13
suricata ET PHISHING Successful Apple Store Transaction Cancellation Phish 2016-08-30 rev 6 2024-04-13
suricata ET PHISHING Successful Synchronize Email Account Phish 2016-06-15 rev 7 2024-04-13