Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN TeleBots BCS-server CnC Beacon rev 1 2016-12-15
snort ET TROJAN TeleBots BCS-server User-Agent rev 1 2016-12-15
snort ET CURRENT_EVENTS Successful Mailbox Deactivation Phish 2016-12-15 rev 1 2016-12-15
snort ET CURRENT_EVENTS Successful Discover Phish M3 2016-12-14 rev 1 2016-12-14
snort ET CURRENT_EVENTS Successful Discover Phish M2 2016-12-14 rev 1 2016-12-14
snort ET INFO Noction IRP Probe rev 1 2016-12-14
snort ET CURRENT_EVENTS Successful Paypal Phish M2 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful Telstra Refund Phish 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful Paypal Phish M1 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful iTunes Connect Phish M3 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful Paypal Phish M3 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful iTunes Connect Phish M1 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful iTunes Connect Phish M2 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful Paypal Phish M4 2016-12-13 rev 2 2016-12-13
snort ET CURRENT_EVENTS Successful Chase Phish 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful Adobe Shared PDF Phish 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful Paypal Phish M5 2016-12-13 rev 1 2016-12-13
snort ET CURRENT_EVENTS Successful Ebay Phish 2016-12-12 rev 1 2016-12-12
snort ET EXPLOIT Netgear R7000 Command Injection Exploit rev 2 2016-12-12
snort ET WEB_CLIENT Javascript XOR Encoding - Observed in Apple Phishing 2016-12-09 rev 1 2016-12-09
snort ET CURRENT_EVENTS Successful Password Protected AMEX Phish 2016-12-09 rev 2 2016-12-09
snort ET CURRENT_EVENTS Successful Linkedin Phish 2016-12-09 rev 1 2016-12-09
snort ET CURRENT_EVENTS Successful Paypal Phish 2016-12-09 rev 1 2016-12-09
snort ET CURRENT_EVENTS Successful Stripe Phish 2016-12-09 rev 1 2016-12-09
snort ET CURRENT_EVENTS Successful Yahoo Phish 2016-12-08 rev 1 2016-12-08
snort ET CURRENT_EVENTS Successful DHL Phish 2016-12-08 rev 1 2016-12-08
snort ET CURRENT_EVENTS Successful iCloud Phish Oct 10 2016 rev 2 2016-12-08
snort ET CURRENT_EVENTS Successful WhatsApp Phish M1 2016-12-07 rev 1 2016-12-07
snort ET CURRENT_EVENTS Successful WhatsApp Phish M2 2016-12-07 rev 1 2016-12-07
snort ET CURRENT_EVENTS Successful Google Drive Phish 2016-12-07 rev 1 2016-12-07
snort ET CURRENT_EVENTS Internet Explorer Information Disclosure Vuln as Observed in RIG EK Prefilter M1 Dec 06 rev 1 2016-12-06
snort ET CURRENT_EVENTS Internet Explorer Information Disclosure Vuln as Observed in RIG EK Prefilter M2 Dec 06 rev 1 2016-12-06
snort ET POLICY HTTP POST invalid method case outbound rev 3 2016-12-05
snort ET CURRENT_EVENTS Successful Paypal Phish M2 2016-12-05 rev 1 2016-12-05
snort ET WEB_SPECIFIC_APPS Joomla GoogleMaps Plugin Open Proxy Access rev 1 2016-12-02
snort ET CURRENT_EVENTS Successful Google Drive Phish M2 2016-12-02 rev 1 2016-12-02
snort ET CURRENT_EVENTS Successful Google Drive Phish M1 2016-12-02 rev 1 2016-12-02
snort ET CURRENT_EVENTS Successful Chase Phish 2016-12-01 rev 1 2016-12-01
snort ET EXPLOIT CVE-2016-3210 Exploit Observed ITW M1 Nov 30 rev 1 2016-11-30
snort ET TROJAN Sharik/Smoke Loader Adobe Connectivity Check 3 rev 2 2016-11-30