Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS Successful Chase Phish 2016-12-16 rev 2 2017-09-28
snort ET CURRENT_EVENTS Successful Google Drive Phish M2 2016-08-25 rev 2 2017-09-27
snort ET CURRENT_EVENTS Google Drive Phishing Landing 2015-11-06 rev 2 2017-09-27
snort ET CURRENT_EVENTS Successful Paypal Phish M2 2015-11-03 rev 2 2017-09-27
snort ET CURRENT_EVENTS Successful Google Drive Phish Dec 4 2015 M1 rev 5 2017-09-27
snort ET CURRENT_EVENTS Google Drive Phishing Landing Nov 6 2015 M1 rev 2 2017-09-27
snort ET CURRENT_EVENTS Possible Raiffeisen Bank Phishing Landing - Title over non SSL rev 2 2017-09-27
snort ET CURRENT_EVENTS Google Drive Phishing Landing Nov 6 2015 M2 rev 2 2017-09-27
snort ET CURRENT_EVENTS Successful AOL Phish 2015-10-09 rev 4 2017-09-26
snort ET MOBILE_MALWARE Trojan-Banker.AndroidOS.RedAlert CnC Beacon rev 2 2017-09-25
snort ET TROJAN Emotet Post Drop C2 Comms rev 2 2017-09-19
snort ET TROJAN Emotet Post Drop C2 Comms M2 rev 2 2017-09-19
snort ET POLICY Possible Mobile Malware POST of IMSI International Mobile Subscriber Identity in URI rev 3 2017-09-18
snort ET TROJAN W32/Emotet.v4 Checkin rev 5 2017-09-18
snort ET CURRENT_EVENTS Successful Paypal Phish M1 Sep 15 2017 rev 2 2017-09-15
snort ET CURRENT_EVENTS Successful Paypal Phish M2 Sep 15 2017 rev 2 2017-09-15
snort ET TROJAN Gh0st RAT Backdoor Checkin rev 3 2017-09-14
snort ET CURRENT_EVENTS Apple Phishing Landing M2 Sep 14 2017 rev 2 2017-09-14
snort ET CURRENT_EVENTS Apple Phishing Landing M1 Sep 14 2017 rev 2 2017-09-14
snort ET TROJAN Win32/ASPC Bot CnC Checkin M3 rev 3 2017-09-13
snort ET TROJAN Win32/Kryptik.FVVZ Variant CnC Checkin 2 rev 1 2017-09-11
snort ET CURRENT_EVENTS CVE-2016-0189 Exploit HFS Actor rev 1 2017-09-07
snort ET TROJAN ApolloLocker Ransomware CnC Checkin 2 rev 1 2017-09-06
snort ET TROJAN ApolloLocker Ransomware CnC Checkin rev 2 2017-09-06
snort ET TROJAN [PTsecurity] Tinba Checkin 4 rev 2 2017-09-04
snort ET CURRENT_EVENTS Dropbox Phishing Landing - Title over non SSL rev 2 2017-09-01
snort ET TROJAN CobianRAT Screenshot Exfil to CnC rev 2 2017-09-01
snort ET TROJAN CobianRAT Checkin to CnC rev 2 2017-09-01
snort ET CURRENT_EVENTS Successful LocalBitcoins Cryptocurrency Exchange Phish Aug 30 2017 rev 2 2017-08-31
snort ET CURRENT_EVENTS Possible NatWest Bank Phishing Landing - Title over non SSL rev 2 2017-08-30
snort ET CURRENT_EVENTS Successful Paxful Cryptocurrency Wallet Phish Aug 30 2017 rev 2 2017-08-29
snort ET CURRENT_EVENTS Successful Poloniex Cryptocurrency Exchange Phish Aug 28 2017 rev 2 2017-08-28
snort ET CURRENT_EVENTS Successful Bank of America Phish 2016-10-14 rev 3 2017-08-28
snort ET CURRENT_EVENTS Successful Exmo Cryptocurrency Exchange Phish Aug 28 2017 rev 2 2017-08-28
snort ET TROJAN JS/HTA Downloader Behavior M3 rev 3 2017-08-25
snort ET CURRENT_EVENTS Disdain EK Flash Exploit M3 Aug 23 2017 rev 1 2017-08-23
snort ET CURRENT_EVENTS Disdain EK Flash Exploit M2 Aug 23 2017 rev 1 2017-08-23
snort ET CURRENT_EVENTS Disdain EK Flash Exploit M1 Aug 23 2017 rev 1 2017-08-23
snort ET CURRENT_EVENTS Disdain EK Payload Aug 23 2017 rev 1 2017-08-23
snort ET CURRENT_EVENTS Likely Malicious Windows SCT Download MSXMLHTTP AX M2 rev 1 2017-08-22