Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET EXPLOIT IBM WebSphere - RCE Java Deserialization rev 4 2024-03-07
suricata ET INFO Unconfigured nginx Access rev 5 2024-03-07
suricata ET MOBILE_MALWARE Android/TrojanDropper.Agent.EP HTTP Host rev 4 2024-03-07
suricata ET PHISHING Anonisma Paypal Phishing Uri Structure 2015-12-29 rev 7 2024-03-07
suricata ET EXPLOIT_KIT EITest SocEng Inject Jan 15 2017 EXE Download rev 5 2024-03-07
suricata ET ADWARE_PUP yupsearch.com Spyware Install - sideb.exe rev 11 2024-03-07
suricata ET PHISHING Successful Fedex/DHL Phish 2018-10-22 rev 4 2024-03-07
suricata ET MALWARE Win32/Parite.B Checkin 3 rev 3 2024-03-07
suricata ET PHISHING Wells Fargo Mobile Phishing Landing 2016-08-01 rev 4 2024-03-07
suricata ET PHISHING Successful Bank of Scotland Phish M1 2015-11-05 rev 5 2024-03-07
suricata ET PHISHING Successful US Bank Phish 2016-09-20 rev 4 2024-03-07
suricata ET WEB_CLIENT Tech Support Phone Scam Landing Jun 29 M3 rev 5 2024-03-07
suricata ET WEB_SPECIFIC_APPS Apache Struts inbound .getWriter OGNL injection remote code execution attempt rev 3 2024-03-07
suricata ET PHISHING Successful Gmail Phish 2016-09-30 rev 5 2024-03-07
suricata ET MALWARE Steganographic Encoded WAV File Inbound via HTTP M2 rev 3 2024-03-07
suricata ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-2017-12617 JSP Upload Bypass Attempt rev 7 2024-03-07
suricata ET PHISHING Successful Mailbox Update Phish 2016-02-17 M2 rev 4 2024-03-07
suricata ET PHISHING Possible Phishing Landing via MoonFruit.com M2 2016-01-22 rev 5 2024-03-07
suricata ET INFO Inbound PowerShell Capable of Enumerating Internal Network via WMI rev 4 2024-03-07
suricata ET PHISHING Successful Poste Italiane Phish Jun 08 2017 rev 6 2024-03-07
suricata ET MALWARE ELF/Emptiness v2 XOR HTTP Flood Command Inbound rev 2 2024-03-07
suricata ET P2P Morpheus Install ini Download rev 12 2024-03-07
suricata ET MALWARE BandarChor/CryptON Ransomware Checkin rev 3 2024-03-07
suricata ET PHISHING [eSentire] Successful Personalized Phish 2018-06-15 rev 3 2024-03-07
suricata ET PHISHING Successful Phish Fake Document Loading Error 2015-07-27 rev 7 2024-03-07
suricata ET PHISHING Successful Chase Phish M3 2016-08-26 rev 4 2024-03-07
suricata ET PHISHING Successful Google Drive Phish 2016-08-18 rev 5 2024-03-07
suricata ET PHISHING Successful Mailbox Update Credential Phish 2015-10-02 rev 6 2024-03-07
suricata ET EXPLOIT Pwdump3e Password Hash Retrieval port 445 rev 12 2024-03-07
suricata ET MALWARE Possible Pipka JS Skimmer - Skimmer Payload Observed M1 rev 3 2024-03-07
suricata ET MOBILE_MALWARE Android Trojan Cloudsota HTTP Host rev 4 2024-03-07
suricata ET MALWARE MRCR1 Ransomware Checkin M2 rev 4 2024-03-07
suricata ET MALWARE Possible Pipka JS Skimmer - Skimmer Payload Observed M5 rev 3 2024-03-07
suricata ET PHISHING Chalbhai Phishing Landing Feb 18 2016 rev 7 2024-03-07
suricata ET ADWARE_PUP Zenotecnico Spyware Install Report rev 9 2024-03-07
suricata ET MALWARE Murlo Trojan Checkin rev 12 2024-03-07
suricata ET PHISHING Suspicious Redirect - Possible Phishing May 25 2016 rev 8 2024-03-07
suricata ET ADWARE_PUP Clickspring.net Spyware Reporting Successful Install rev 11 2024-03-07
suricata ET EXPLOIT Possible ETERNALCHAMPION MS17-010 Sync Response rev 6 2024-03-07
suricata ET PHISHING Successful TeamIPwned Phish 2016-08-30 rev 4 2024-03-07