Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_CLIENT Microsoft Tech Support Phone Scam M2 Jul 07 2017 rev 2 2019-08-16
snort ET WEB_CLIENT Fake Virus Phone Scam Audio Oct 30 rev 2 2019-08-16
snort ET WEB_CLIENT Tech Support Scam Landing M1 2019-04-15 rev 3 2019-08-16
snort ET WEB_CLIENT Fake Virus Phone Scam Landing Oct 19 M3 rev 2 2019-08-16
snort ET WEB_CLIENT Tech Support Scam Landing 2018-07-18 rev 3 2019-08-16
snort ET WEB_CLIENT Microsoft Tech Support Phone Scam M4 Jul 07 2017 rev 2 2019-08-16
snort ET EXPLOIT Joomla 3.2.1 SQL injection attempt rev 2 2019-08-16
snort ET WEB_CLIENT Tech Support Phone Scam Landing 2017-07-26 rev 3 2019-08-16
snort ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2019-08-16
snort ET TROJAN Clipsa Stealer - Exfiltration Activity rev 2 2019-08-16
snort ET WEB_CLIENT Fake Adobe Flash Player update warning enticing clicks to malware payload rev 3 2019-08-16
snort ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2019-08-16
snort ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2019-08-16
snort ET WEB_CLIENT Fake AV Phone Scam Landing July 20 2015 M2 rev 2 2019-08-16
snort ET WEB_CLIENT Tech Support Phone Scam Landing 2017-07-26 rev 3 2019-08-16
snort ET TROJAN [TGI] Py.Machete FTP Exfil 2 rev 4 2019-08-16
snort ET WEB_CLIENT Microsoft Tech Support Scam Landing M1 Oct 13 2017 rev 3 2019-08-16
snort ET TROJAN Aurora Ransomware CnC Checkin rev 4 2019-08-16
snort ET TROJAN Clipsa Stealer - Coinminer Download rev 2 2019-08-16
snort ET TROJAN Outbound POST Request with ps PowerShell Command Output rev 3 2019-08-16
snort ET WEB_CLIENT Tech Support Phone Scam Landing M5 Jun 3 rev 2 2019-08-16
snort ET WEB_CLIENT Tech Support Phone Scam Landing Dec 30 M1 rev 2 2019-08-16
snort ET WEB_CLIENT Fake AV Phone Scam Landing June 16 2015 M4 rev 2 2019-08-16
snort ET WEB_CLIENT Fake Video Player Update Scam Oct 30 rev 2 2019-08-16
snort ET WEB_CLIENT Tech Support Phone Scam Landing 2018-01-10 rev 3 2019-08-16
snort ET TROJAN [TGI] Py.Machete FTP Exfil 1 rev 4 2019-08-16
snort ET WEB_CLIENT Generic Fake Support Phone Scam Mar 8 rev 2 2019-08-16
snort ET WEB_CLIENT Fake AV Phone Scam Landing July 20 2015 M4 rev 2 2019-08-16
snort ET WEB_CLIENT Fake AV Phone Scam Landing Apr 4 rev 2 2019-08-16
suricata ET MALWARE [TGI] Py.Machete FTP Exfil 2 rev 3 2019-08-16
suricata ET MALWARE [TGI] Py.Machete FTP Exfil 1 rev 3 2019-08-16
snort ET MOBILE_MALWARE Possible Android CVE-2014-6041 rev 3 2019-08-15
snort ET MOBILE_MALWARE Possible Android InMobi SDK SideDoor Access sendSMS rev 2 2019-08-15
snort ET MOBILE_MALWARE Possible Android CVE-2014-6041 rev 3 2019-08-15
snort ET EXPLOIT QNAP Shellshock CVE-2014-6271 rev 2 2019-08-15
snort ET TROJAN W32/Dridex Binary Download Mar 23 2016 rev 3 2019-08-15
snort ET TROJAN Dridex DL Pattern Feb 18 2016 rev 2 2019-08-15
snort ET CURRENT_EVENTS Generic 302 Redirect to Phishing Landing rev 2 2019-08-15
snort ET MOBILE_MALWARE Possible Android InMobi SDK SideDoor Access sendMail rev 2 2019-08-15
snort ET MOBILE_MALWARE Possible Android InMobi SDK SideDoor Access postToSocial rev 2 2019-08-15