Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Canada Revenue Agency Phish 2016-08-30 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M4 2016-10-06 rev 7 2024-04-13
suricata ET EXPLOIT AVTECH Authenticated Command Injection in CloudSetup.cgi rev 4 2024-04-13
suricata ET MALWARE Quant Loader Download Response rev 6 2024-04-13
suricata ET ADWARE_PUP Win32/Agent.NDV Receiving Task Config File rev 5 2024-04-13
suricata ET MALWARE W32/Goolbot.E Checkin UA Detected iamx rev 8 2024-04-13
suricata ET PHISHING Successful Adobe Shared Document Phish 2016-08-19 rev 8 2024-04-13
suricata ET PHISHING Successful Gmail Phish 2015-11-05 rev 8 2024-04-13
suricata ET PHISHING Successful Alibaba Phish 2016-10-26 rev 6 2024-04-13
suricata ET PHISHING Successful Mailbox Renewal Phish 2016-08-19 rev 7 2024-04-13
suricata ET PHISHING Successful iTunes Connect Phish M1 2016-10-21 rev 7 2024-04-13
suricata ET INFO External IP Address Lookup via vtransmit .com rev 5 2024-04-13
suricata ET MALWARE XPSecurityCenter FakeAV Checkin rev 7 2024-04-13
suricata ET PHISHING Successful BB&T Bank Phish 2016-12-15 rev 8 2024-04-13
suricata ET MALWARE ABUSE.CH TorrenLocker Payment Domain Detected rev 5 2024-04-13
suricata ET PHISHING Successful Google Drive Phish M1 2016-12-02 rev 7 2024-04-13
suricata ET PHISHING Successful RBC Royal Bank Phish Mar 27 2017 rev 5 2024-04-13
suricata ET MALWARE Pteranodon Variant 2 Backdoor Checkin rev 5 2024-04-13
suricata ET PHISHING Generic Personalized Google Firebase Hosted Phishing Landing rev 3 2024-04-13
suricata ET MALWARE DeepEnd Research Ransomware CrypMIC Payment Onion Domain rev 6 2024-04-13
suricata ET USER_AGENTS Steam HTTP Client User-Agent rev 4 2024-04-13
suricata ET PHISHING Successful National Australia Bank 2016-09-28 rev 7 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 6 rev 6 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 1 rev 6 2024-04-13
suricata ET PHISHING Successful Chase Phish M2 2015-12-01 rev 7 2024-04-13
suricata ET PHISHING Successful RBC Royal Bank Phish M2 Aug 17 2017 rev 4 2024-04-13
suricata ET MALWARE Glupteba CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET PHISHING Successful SFR Phishing 2015-11-24 rev 5 2024-04-13
suricata ET MALWARE Evil Monero Cryptocurrency Miner Request Pools rev 5 2024-04-13
suricata ET MALWARE SLUB Domain in DNS Lookup rev 4 2024-04-13
suricata ET PHISHING Successful Gmail Phish M2 2016-10-12 rev 5 2024-04-13
suricata ET PHISHING Successful Halkbank Phish M2 2018-04-16 rev 3 2024-04-13
suricata ET PHISHING Successful Natwest Bank Phish 2015-11-21 rev 7 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 6 rev 6 2024-04-13
suricata ET MALWARE Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET MALWARE APT32 Win32/Ratsnif POSTing Log Message to CnC rev 4 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup checkmalware.org rev 7 2024-04-13
suricata ET PHISHING Successful WhatsApp Payment Phish 2016-09-01 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish M3 2016-12-13 rev 5 2024-04-13
suricata ET PHISHING Successful Battle.net Phish 2015-09-22 rev 5 2024-04-13