Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_CLIENT Great Cannon DDoS JS M3 rev 5 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET PHISHING Generic Personalized Google Firebase Hosted Phishing Landing rev 3 2024-04-13
suricata ET DOS Bittorrent User-Agent inbound - possible DDOS rev 5 2024-04-13
suricata ET PHISHING Successful Santander Bank Phish 2016-10-28 rev 7 2024-04-13
suricata ET PHISHING Successful Dropbox/Docusign Phish 2016-10-28 rev 6 2024-04-13
suricata ET EXPLOIT Possible WePresent WIPG1000 OS Command Injection rev 5 2024-04-13
suricata ET MALWARE Ransomware Locky .onion Payment Domain rev 5 2024-04-13
suricata ET MALWARE ABUSE.CH TorrenLocker Payment Domain Detected rev 5 2024-04-13
suricata ET PHISHING Successful Natwest Bank Phish 2015-11-21 rev 7 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13
suricata ET PHISHING Successful Excel Phish 2016-11-17 rev 8 2024-04-13
suricata ET EXPLOIT Xfinity Gateway - Remote Code Execution rev 4 2024-04-13
suricata ET PHISHING Successful RBC Royal Bank Phish Mar 27 2017 rev 5 2024-04-13
suricata ET PHISHING Successful Outlook Webmail Phishing M2 2015-11-21 rev 7 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 2 rev 6 2024-04-13
suricata ET PHISHING Successful Canada Revenue Agency Phish 2016-08-30 rev 6 2024-04-13
suricata ET MALWARE Possible Winnti-related DNS Lookup rev 6 2024-04-13
suricata ET INFO OpenVPN Update Check rev 6 2024-04-13
suricata ET PHISHING Successful Netflix Phish 2016-10-12 rev 7 2024-04-13
suricata ET PHISHING Successful Western Union/Paypal Phish 2016-09-26 rev 6 2024-04-13
suricata ET PHISHING Successful DHL Phish 2016-09-16 rev 8 2024-04-13
suricata ET USER_AGENTS Aria2 User-Agent rev 4 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-11-03 M3 rev 5 2024-04-13
suricata ET ADWARE_PUP PUP Win32/AdWare.Sendori User-Agent rev 6 2024-04-13
suricata ET MALWARE OSX/Mughthesec/SafeFinder/OperatorMac DNS Query Observed rev 7 2024-04-13
suricata ET PHISHING Successful Apple Store Phish M2 2016-12-29 rev 6 2024-04-13
suricata ET MALWARE Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET PHISHING Successful IRS Phish 2016-01-23 rev 8 2024-04-13
suricata ET MALWARE Win32/TaskPerformer Downloader CnC Activity rev 3 2024-04-13
suricata ET MALWARE CryptON/Nemesis/X3M Ransomware Onion Domain rev 6 2024-04-13
suricata ET ADWARE_PUP Conduit Trovi Adware/PUA rev 5 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 2016-11-17 rev 7 2024-04-13
suricata ET MALWARE XPSecurityCenter FakeAV Checkin rev 7 2024-04-13
suricata ET MALWARE APT32 Win32/Ratsnif POSTing Log Message to CnC rev 4 2024-04-13
suricata ET MOBILE_MALWARE DNS Query for gongfu-android.com DroidKungFu CnC Server rev 7 2024-04-13
suricata ET EXPLOIT Netgear WNDR Router DNS Change POST Request rev 7 2024-04-13
suricata ET MALWARE ABUSE.CH Locky Domain rev 5 2024-04-13
suricata ET ADWARE_PUP AdWare.MSIL.Solimba.b POST rev 7 2024-04-13
suricata ET ADWARE_PUP Loadmoney.A Checkin 4 rev 8 2024-04-13