Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE OSX/WireLurker DNS Query Domain www.comeinbaby.com rev 8 2024-04-13
suricata ET MALWARE Observed AgentTesla Domain Request rev 6 2024-04-13
suricata ET MALWARE Phorpiex CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET ADWARE_PUP Win32/DealPly Configuration File Inbound rev 6 2024-04-13
suricata ET MALWARE DNS Query for Cloud Atlas ecolines.es rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-10-28 rev 5 2024-04-13
suricata ET PHISHING Successful Facebook Phish M1 2016-09-30 rev 5 2024-04-13
suricata ET EXPLOIT_KIT Possible Malvertising EK Redirect to EK M2 rev 4 2024-04-13
suricata ET MALWARE Win32/Emotet CnC Checkin Response rev 5 2024-04-13
suricata ET ADWARE_PUP APN/Ask Toolbar PUA/PUP User-Agent rev 6 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 34 rev 6 2024-04-13
suricata ET MALWARE Win32.Zbot.ivgw Downloading EXE rev 9 2024-04-13
suricata ET MALWARE Observed DNS Query for MageCart Data Exfil Domain rev 5 2024-04-13
suricata ET SCAN Mini MySqlatOr SQL Injection Scanner rev 10 2024-04-13
suricata ET PHISHING Successful Etisalat Phish 2016-12-20 rev 7 2024-04-13
suricata ET PHISHING Successful USAA Phish 2015-10-20 rev 7 2024-04-13
suricata ET PHISHING Successful Clydesdale Bank Phish 2020-12-30 rev 3 2024-04-13
suricata ET MALWARE W32/Hicrazyk.A Downloader Install CnC Beacon rev 10 2024-04-13
suricata ET PHISHING Successful Excel Online Phish 2015-11-26 rev 7 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup adobeincorp.com rev 7 2024-04-13
suricata ET HUNTING Suspicious HTTP Referer C Drive Path rev 7 2024-04-13
suricata ET PHISHING Successful Google Drive Phish M2 2016-12-02 rev 7 2024-04-13
suricata ET MALWARE CenterPOS CnC rev 5 2024-04-13
suricata ET PHISHING Successful RBC Royal Bank Phish Jan 30 2017 rev 6 2024-04-13
suricata ET PHISHING Successful Chase Phish 2015-09-24 rev 7 2024-04-13
suricata ET USER_AGENTS Tear Application User-Agent Detected rev 10 2024-04-13
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Femas.b DNS Lookup rev 6 2024-04-13
suricata ET MALWARE OSX/WireLurker DNS Query Domain manhuaba.com.cn rev 6 2024-04-13
suricata ET PHISHING Successful Blockchain Account Phish Aug 19 2016 rev 7 2024-04-13
suricata ET MALWARE Gamaredon CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET EXPLOIT Hootoo TripMate Attempted Remote Command Injection Outbound rev 4 2024-04-13
suricata ET PHISHING Successful PNC Bank Phish M2 2016-10-14 rev 7 2024-04-13
suricata ET MALWARE Peppy/KeeOIL Google Connectivity Check rev 4 2024-04-13
suricata ET PHISHING Successful Santander Bank Phish 2016-10-28 rev 7 2024-04-13
suricata ET ADWARE_PUP PCAcceleratePro PUA/Adware User-Agent rev 7 2024-04-13
suricata ET PHISHING Successful Netflix Phish 2016-10-12 rev 7 2024-04-13
suricata ET PHISHING Successful Adobe Phish 2015-08-31 rev 6 2024-04-13
suricata ET MALWARE Win32/Retadup Success Response from CnC rev 5 2024-04-13
suricata ET MALWARE Glupteba CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET MALWARE WSHRAT CnC Checkin rev 3 2024-04-13