Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Common Paypal Phishing URI Feb 24 2017 rev 4 2024-03-07
suricata ET PHISHING Possible Successful Ebay Phishing Domain Feb 02 2017 rev 5 2024-03-07
suricata ET WEB_SERVER China Chopper WebShell Observed Outbound rev 5 2024-03-07
suricata ET PHISHING Successful Fedex/DHL Phish 2018-10-22 rev 4 2024-03-07
suricata ET MALWARE x0Proto File Info Request rev 2 2024-03-07
suricata ET PHISHING Email Termination Phishing Landing 2016-06-22 rev 4 2024-03-07
suricata ET EXPLOIT Apache Struts memberAccess and opensymphony inbound OGNL injection remote code execution attempt rev 4 2024-03-07
suricata ET ATTACK_RESPONSE Windows SCM DLL Hijack Command Inbound via HTTP M2 rev 4 2024-03-07
suricata ET EXPLOIT Serialized Java Object Calling Common Collection Function rev 2 2024-03-07
suricata ET EXPLOIT Remote Command Execution via Android Debug Bridge 2 rev 2 2024-03-07
suricata ET MALWARE Possible Pipka JS Skimmer - Skimmer Payload Observed M5 rev 3 2024-03-07
suricata ET ADWARE_PUP Tibsystems Spyware Download rev 12 2024-03-07
suricata ET PHISHING Possible Phishing Landing - Tectite Web Form Abuse rev 4 2024-03-07
suricata ET PHISHING Paypal Phishing Redirect M1 Feb 24 2017 rev 5 2024-03-07
suricata ET WEB_SPECIFIC_APPS PHPNuke general SQL injection attempt rev 13 2024-03-07
suricata ET EXPLOIT IBM WebSphere - RCE Java Deserialization rev 4 2024-03-07
suricata ET MALWARE BlackTech Plead Encrypted Payload Inbound rev 5 2024-03-07
suricata ET PHISHING Generic Email Login Phishing Landing 2016-06-02 rev 4 2024-03-07
suricata ET MOBILE_MALWARE Android JadeRAT CnC Beacon rev 3 2024-03-07
suricata ET ADWARE_PUP Clickspring.net Spyware Reporting Successful Install rev 11 2024-03-07
suricata ET INFO Unconfigured nginx Access rev 5 2024-03-07
suricata ET PHISHING Successful Chase Phish 2016-09-02 rev 4 2024-03-07
suricata ET MALWARE Koobface Checkin via POST rev 13 2024-03-07
suricata ET PHISHING Observed Possible Phishing Landing Page 2021-06-25 rev 3 2024-03-07
suricata ET PHISHING Successful US Bank Phish 2016-09-20 rev 4 2024-03-07
suricata ET MALWARE Possible Pipka JS Skimmer - Skimmer Payload Observed M2 rev 3 2024-03-07
suricata ET PHISHING Stripe Phishing Landing Dec 09 2016 rev 5 2024-03-07
suricata ET PHISHING Successful Gmail Phish 2016-09-30 rev 5 2024-03-07
suricata ET MOBILE_MALWARE Android/TrojanDropper.Agent.EP HTTP Host rev 4 2024-03-07
suricata ET PHISHING Successful Mailbox Upgrade Phish 2016-06-27 M1 rev 4 2024-03-07
suricata ET PHISHING Successful Paypal Phish M2 2016-12-13 rev 4 2024-03-07
suricata ET PHISHING PhishMe.com Phishing Landing Exercise rev 7 2024-03-07
suricata ET PHISHING Apple Phishing Landing M1 Sep 14 2017 rev 3 2024-03-07
suricata ET ATTACK_RESPONSE Possibly Malicious VBS Writing to Persistence Registry Location rev 6 2024-03-07
suricata ET PHISHING Successful OWA Phish Apr 25 2017 rev 4 2024-03-07
suricata ET PHISHING Phishing Landing via Weebly.com M1 2016-02-02 rev 6 2024-03-07
suricata ET SCAN Possible Nmap User-Agent Observed rev 5 2024-03-07
suricata ET PHISHING Successful Bank of America Phish 2015-11-06 rev 6 2024-03-07
suricata ET PHISHING Successful Poloniex Cryptocurrency Exchange Phish Aug 28 2017 rev 4 2024-03-07
suricata ET PHISHING Successful Chase Phish Dec 29 2016 rev 5 2024-03-07