Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE CobianRAT Screenshot Exfil to CnC rev 3 2024-03-07
suricata ET PHISHING Phishing Landing via Weebly.com M2 2016-02-02 rev 6 2024-03-07
suricata ET MALWARE [Fireeye] Backdoor.BEACON M4 rev 3 2024-03-07
suricata ET MALWARE Sharik/Smoke Loader Receiving Payload rev 4 2024-03-07
suricata ET PHISHING Paypal Phishing Landing Feb 24 2017 rev 5 2024-03-07
suricata ET MALWARE REvil Exfil SFTP Certificate Inbound rev 2 2024-03-07
suricata ET EXPLOIT Possible CVE-2016-10033 PHPMailer RCE Attempt rev 4 2024-03-07
suricata ET PHISHING Successful Squirrelmail Phishing 2015-11-20 rev 6 2024-03-07
suricata ET MALWARE CenterPOS Load Plugins rev 4 2024-03-07
suricata ET EXPLOIT Possible ECLIPSEDWING MS08-067 rev 2 2024-03-07
suricata ET PHISHING Successful Chase Phishing 2016-12-12 rev 5 2024-03-07
suricata ET MALWARE Likely Malicious Windows SCT Download MSXMLHTTP M2 rev 5 2024-03-07
suricata ET MALWARE Locky Ransomware Writing Instructions via SMB rev 2 2024-03-07
suricata ET MALWARE Known Sinkhole Response Kryptos Logic rev 3 2024-03-07
suricata ET MALWARE Observed Win32/Orion Logger SMTP Exfil Subject Line rev 2 2024-03-07
suricata ET MALWARE Pteranodon Backdoor CnC POST rev 4 2024-03-07
suricata ET MALWARE Locky Ransomware Renaming File via SMB rev 2 2024-03-07
suricata ET PHISHING Targeted Office 365 Phishing Landing 2016-08-23 rev 4 2024-03-07
suricata ET MALWARE Observed StrongPity CnC Domain in TLS SNI rev 2 2024-03-07
suricata ET PHISHING Mailbox Upgrade Phishing Landing 2016-06-27 rev 4 2024-03-07
suricata ET EXPLOIT Netis WF2419 2.2.36123 - Remote Code Execution CVE-2019-19356 rev 3 2024-03-07
suricata ET PHISHING Successful Dropbox Phish 2015-12-10 rev 5 2024-03-07
suricata ET PHISHING Successful Chase Phish 2015-09-24 rev 5 2024-03-07
suricata ET PHISHING Generic NewInjection Phishing Landing 2021-03-10 rev 3 2024-03-07
suricata ET PHISHING Successful Adobe Shared PDF Phish 2016-12-13 rev 4 2024-03-07
suricata ET PHISHING Phishing Landing via Weebly.com M4 2016-02-02 rev 6 2024-03-07
suricata ET PHISHING Phishing Landing via Weebly.com M3 2016-02-02 rev 6 2024-03-07
suricata ET HUNTING Possible Covid19 Themed Email Spam Outbound M2 rev 3 2024-03-07
suricata ET MALWARE Bitter RAT TCP CnC Beacon rev 2 2024-03-07
suricata ET WEB_SPECIFIC_APPS Netgear WNR2000v5 Possible Serial Number Leak rev 4 2024-03-07
suricata ET PHISHING PhishMe.com Phishing Landing Exercise rev 7 2024-03-07
suricata ET MALWARE Mirai pTea Variant - Bot Upload Command Inbound rev 2 2024-03-07
suricata ET PHISHING Suspicious HTML Hex Obfuscated Title - Possible Phishing Landing Jun 28 2017 rev 4 2024-03-07
suricata ET EXPLOIT IBM WebSphere - RCE Java Deserialization rev 4 2024-03-07
suricata ET PHISHING Possible Phishing Landing via MoonFruit.com M3 2016-01-22 rev 5 2024-03-07
suricata ET PHISHING Successful Gmail Phish 2016-09-30 rev 5 2024-03-07
suricata ET MALWARE ELF/Emptiness v2 XOR HTTP Flood Command Inbound rev 2 2024-03-07
suricata ET PHISHING Successful Google Drive Phish 2016-08-18 rev 5 2024-03-07
suricata ET SCAN Redis SSH Key Overwrite Probing rev 3 2024-03-07
suricata ET PHISHING INTERAC Payment Multibank Phishing Landing Mar 14 2017 rev 4 2024-03-07