Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET EXPLOIT Mi Router 3 Remote Code Execution CVE-2018-13023 rev 3 2024-03-07
suricata ET PHISHING Alibaba Phishing Landing 2016-08-31 rev 4 2024-03-07
suricata ET PHISHING Successful Intuit Phish 2016-07-21 rev 5 2024-03-07
suricata ET EXPLOIT Possible ETERNALCHAMPION MS17-010 Sync Response rev 6 2024-03-07
suricata ET MALWARE Win32/Parite.B Checkin 3 rev 3 2024-03-07
suricata ET PHISHING Successful Paypal Account Phish 2015-10-30 3 rev 4 2024-03-07
suricata ET MALWARE Possible Pipka JS Skimmer - Skimmer Payload Observed M1 rev 3 2024-03-07
suricata ET PHISHING Mailbox Update Phishing Landing M1 2016-05-16 rev 4 2024-03-07
suricata ET PHISHING Successful Facebook Phish 2016-09-02 rev 4 2024-03-07
suricata ET MALWARE Mirai pTea Variant - Bot Upload Command Outbound rev 2 2024-03-07
suricata ET PHISHING Shipping Document Phishing Landing 2016-06-23 rev 5 2024-03-07
suricata ET PHISHING Successful Webmail Phish M2 2016-06-22 rev 5 2024-03-07
suricata ET PHISHING Successful Yahoo Password Strength Phish M2 2016-08-24 rev 4 2024-03-07
suricata ET PHISHING Windows Settings Phishing Landing Jul 22 2016 rev 6 2024-03-07
suricata ET WEB_CLIENT Possible Chrome WebEx Extension RCE Attempt rev 6 2024-03-07
suricata ET MALWARE Inbound MonetizeUs/LNKR Struct rev 3 2024-03-07
suricata ET EXPLOIT Possible Successful ETERNALROMANCE MS17-010 - Windows Executable Observed rev 4 2024-03-07
suricata ET EXPLOIT Pwdump3e Password Hash Retrieval port 139 rev 11 2024-03-07
suricata ET EXPLOIT FTPShell client Stack Buffer Overflow rev 2 2024-03-07
suricata ET PHISHING Successful Outlook Password Update Phish M3 2016-09-01 rev 4 2024-03-07
suricata ET PHISHING Successful Outlook Phish 2016-10-25 rev 4 2024-03-07
suricata ET MALWARE Ranscam Ransomware Contact Form rev 4 2024-03-07
suricata ET CHAT ICQ Login rev 6 2024-03-07
suricata ET MALWARE MSIL/KeyRedirEx Banker Receiving Redirect/Inject List rev 6 2024-03-07
suricata ET PHISHING Successful DHL Phish 2016-02-09 rev 7 2024-03-07
suricata ET PHISHING Successful Generic Phish 2016-10-27 rev 5 2024-03-07
suricata ET EXPLOIT Pwdump4 Session Established GetHash port 139 rev 5 2024-03-07
suricata ET PHISHING Possible barclays .co. uk Phishing Domain 2016-06-22 rev 8 2024-03-07
suricata ET ADWARE_PUP Zenotecnico Adware 2 rev 9 2024-03-07
suricata ET PHISHING APT SWC PluginDetect Landing Cookie 2015-10-15 rev 6 2024-03-07
suricata ET PHISHING Possible Successful Discover Phish Feb 02 2017 rev 6 2024-03-07
suricata ET P2P ed2k request part rev 12 2024-03-07
suricata ET MALWARE DFKRAT CnC Checkin M2 rev 1 2024-03-07
suricata ET EXPLOIT IBM WebSphere - RCE Java Deserialization rev 4 2024-03-07
suricata ET PHISHING Possible Phishing Landing via MoonFruit.com M3 2016-01-22 rev 5 2024-03-07
suricata ET MALWARE Arechclient2 Backdoor CnC Keep-Alive rev 3 2024-03-07
suricata ET PHISHING Chalbhai Phishing Landing Feb 18 2016 rev 7 2024-03-07
suricata ET PHISHING Suspicious Minimal HTTP Refresh to Googledrive.com - Possible Phishing rev 4 2024-03-07
suricata ET PHISHING Successful US Bank Phish 2016-09-20 rev 4 2024-03-07
suricata ET EXPLOIT_KIT Possible Router EK Landing Page Inbound 2019-05-24 rev 4 2024-03-07