Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Possible Phishing Landing via Moonfruit M1 2016-10-03 rev 4 2024-03-07
suricata ET PHISHING Common Paypal Phishing URI Feb 24 2017 rev 4 2024-03-07
suricata ET EXPLOIT Mi Router 3 Remote Code Execution CVE-2018-13023 rev 3 2024-03-07
suricata ET INFO Inbound PowerShell Capable of Enumerating Internal Network via WMI rev 4 2024-03-07
suricata ET PHISHING 401TRG Successful Multi-Email Phish - Observed in Docusign/Dropbox/Onedrive/Gdrive Nov 02 2017 rev 4 2024-03-07
suricata ET MALWARE IcedID CnC Domain in SNI rev 2 2024-03-07
suricata ET WEB_SERVER China Chopper WebShell Observed Outbound rev 5 2024-03-07
suricata ET ADWARE_PUP Media Pass ActiveX Install rev 10 2024-03-07
suricata ET MALWARE BrushaLoader CnC Domain in SNI rev 4 2024-03-07
suricata ET MALWARE MRCR1 Ransomware Checkin M2 rev 4 2024-03-07
suricata ET PHISHING Successful Generic Phish - Fake Loading Page 2017-08-03 rev 4 2024-03-07
suricata ET PHISHING Adobe Phishing Landing 2016-03-10 rev 5 2024-03-07
suricata ET MALWARE BandarChor/CryptON Ransomware Checkin rev 3 2024-03-07
suricata ET MALWARE PLATINUM Steganographic HTTP Response Page Inbound rev 4 2024-03-07
suricata ET PHISHING Synchronize Email Account Phishing Landing 2016-07-15 rev 4 2024-03-07
suricata ET PHISHING Mailbox Update Phishing Landing M1 2016-05-16 rev 4 2024-03-07
suricata ET ADWARE_PUP Zenotecnico Spyware Install Report rev 9 2024-03-07
suricata ET PHISHING Anonisma Paypal Phishing Uri Structure 2015-12-29 rev 7 2024-03-07
suricata ET MALWARE Mirai pTea Variant - Bot Upload Command Inbound rev 2 2024-03-07
suricata ET PHISHING Successful Poste Italiane Phish Jun 08 2017 rev 6 2024-03-07
suricata ET PHISHING Possible Chase Phishing Domain Mar 14 2016 rev 7 2024-03-07
suricata ET HUNTING Redirect to Joom AG Hosted Document - Potential Phishing rev 3 2024-03-07
suricata ET MOBILE_MALWARE Android Trojan Cloudsota HTTP Host rev 4 2024-03-07
suricata ET HUNTING Possible Covid19 Themed Email Spam Outbound M4 rev 3 2024-03-07
suricata ET PHISHING Possible Successful Craigslist Phishing Domain Feb 07 2017 rev 5 2024-03-07
suricata ET HUNTING Possibly Suspicious Request for Putty.exe from Non-Standard Download Location rev 4 2024-03-07
suricata ET PHISHING Account Update Phishing Landing 2016-09-06 rev 4 2024-03-07
suricata ET PHISHING TeamIPwned/Hellion Phishing Landing 2016-08-30 rev 4 2024-03-07
suricata ET PHISHING Email System Manager Phishing Landing 2016-04-12 rev 4 2024-03-07
suricata ET P2P Morpheus Install rev 12 2024-03-07
suricata ET WEB_CLIENT Tech Support Phone Scam Landing M1 2016-08-12 rev 4 2024-03-07
suricata ET PHISHING Possible Successful Phish to .tk domain Aug 26 2016 rev 6 2024-03-07
suricata ET MALWARE Possible STEADYPULSE Webshell Accessed M2 rev 2 2024-03-07
suricata ET WEB_SPECIFIC_APPS Apache Struts inbound .getWriter OGNL injection remote code execution attempt rev 3 2024-03-07
suricata ET PHISHING Generic Email Login Phishing Landing 2016-06-02 rev 4 2024-03-07
suricata ET WEB_CLIENT Microsoft Tech Support Scam M2 2016-09-15 rev 4 2024-03-07
suricata ET MALWARE Win32/Blacknix CnC Heartbeat rev 3 2024-03-07
suricata ET PHISHING Possible Sparkasse Phishing Domain 2021-04-05 rev 3 2024-03-07
suricata ET MALWARE DFKRAT CnC Checkin M2 rev 1 2024-03-07
suricata ET MALWARE TwoFace WebShell Detected rev 3 2024-03-07