Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Poloniex Cryptocurrency Exchange Phish Aug 28 2017 rev 4 2024-03-07
suricata ET PHISHING Phishing Landing via MyFreeSites.com M2 2016-03-31 rev 4 2024-03-07
suricata ET PHISHING Webmail Update Phishing Landing 2016-01-15 rev 4 2024-03-07
suricata ET PHISHING Successful Amazon Phish 2015-11-07 rev 6 2024-03-07
suricata ET MALWARE CenterPOS Delete Plugins rev 4 2024-03-07
suricata ET PHISHING Successful Bank of America Phish 2015-11-06 rev 6 2024-03-07
suricata ET PHISHING Successful Wells Fargo Phish 2016-05-26 rev 5 2024-03-07
suricata ET PHISHING Successful Paypal Phish Jan 23 2017 rev 5 2024-03-07
suricata ET WEB_CLIENT Tech Support Scam Landing M1 2019-04-15 rev 5 2024-03-07
suricata ET PHISHING Successful Adobe Phish 2016-03-10 rev 7 2024-03-07
suricata ET MALWARE Murlo Trojan Checkin rev 12 2024-03-07
suricata ET MALWARE Possible Pipka JS Skimmer - Skimmer Payload Observed M5 rev 3 2024-03-07
suricata ET PHISHING Successful Fedex/DHL Phish 2018-10-22 rev 4 2024-03-07
suricata ET PHISHING OneDrive Phishing Landing 2021-03-15 rev 3 2024-03-07
suricata ET MALWARE Possible CryptXXX Ransomware Renaming Encrypted File SMB v2 rev 3 2024-03-07
suricata ET PHISHING France Ministry of Action and Public Accounts Phish Landing rev 3 2024-03-07
suricata ET WEB_CLIENT Tech Support Phone Scam Landing M1 2016-08-12 rev 4 2024-03-07
suricata ET WEB_SPECIFIC_APPS PHPNuke general SQL injection attempt rev 13 2024-03-07
suricata ET PHISHING Email Termination Phishing Landing 2016-06-22 rev 4 2024-03-07
suricata ET PHISHING Successful Facebook Phish 2016-09-02 rev 4 2024-03-07
suricata ET WEB_CLIENT Microsoft Tech Support Scam M2 2016-09-15 rev 4 2024-03-07
suricata ET PHISHING DHL Phishing Landing 2016-08-31 rev 4 2024-03-07
suricata ET PHISHING Successful Paypal Account Phish 2015-10-30 3 rev 4 2024-03-07
suricata ET PHISHING Account Update Phishing Landing 2016-09-06 rev 4 2024-03-07
suricata ET PHISHING Successful Intuit Phish 2016-07-21 rev 5 2024-03-07
suricata ET PHISHING Successful Mailbox Deactivation Phish 2016-12-15 rev 4 2024-03-07
suricata ET PHISHING Apple Phishing Landing M1 Sep 14 2017 rev 3 2024-03-07
suricata ET WEB_SERVER China Chopper WebShell Observed Outbound rev 5 2024-03-07
suricata ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-2017-12617 JSP Upload Bypass Attempt rev 7 2024-03-07
suricata ET MALWARE DFKRAT CnC Checkin M2 rev 1 2024-03-07
suricata ET MALWARE Arechclient2 Backdoor CnC Keep-Alive rev 3 2024-03-07
suricata ET PHISHING Redirect to Adobe Shared Document Phishing M3 2016-04-18 rev 11 2024-03-07
suricata ET PHISHING Possible Amazon Phishing Domain 2016-06-21 rev 7 2024-03-07
suricata ET PHISHING Possible Apple Phishing Domain Mar 14 2016 rev 7 2024-03-07
suricata ET PHISHING Possible Successful Ebay Phishing Domain Feb 02 2017 rev 5 2024-03-07
suricata ET EXPLOIT Possible Telerik UI CVE-2019-18935 File Upload Attempt M1 rev 3 2024-03-07
suricata ET PHISHING [eSentire] Successful Personalized Phish 2018-06-15 rev 3 2024-03-07
suricata ET PHISHING Successful Mailbox Update Credential Phish 2015-10-02 rev 6 2024-03-07
suricata ET PHISHING Email System Manager Phishing Landing 2016-04-12 rev 4 2024-03-07
suricata ET PHISHING Successful TeamIPwned Phish 2016-08-30 rev 4 2024-03-07