Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET EXPLOIT Firefox 0-day used against TOR browser Nov 29 2016 M2 rev 1 2016-11-30
snort ET TROJAN Sharik/Smoke Loader Adobe Connectivity Check 2 rev 2 2016-11-30
snort ET EXPLOIT CVE-2016-3210 Exploit Observed ITW M1 Nov 30 rev 1 2016-11-30
snort ET TROJAN Sharik/Smoke Loader Java Connectivity Check rev 2 2016-11-30
snort ET TROJAN Sharik/Smoke Loader Adobe Connectivity check rev 3 2016-11-30
snort ET TROJAN Sharik/Smoke Loader Receiving Payload rev 1 2016-11-30
snort ET EXPLOIT Firefox 0-day used against TOR browser Nov 29 2016 M1 rev 1 2016-11-30
snort ET EXPLOIT CVE-2016-3210 Exploit Observed ITW M1 Nov 30 rev 1 2016-11-30
snort ET TROJAN Sharik/Smoke Loader Adobe Connectivity Check 3 rev 2 2016-11-30
snort ET CURRENT_EVENTS Successful Paypal Phish M1 2016-11-29 rev 1 2016-11-29
snort ET EXPLOIT Eir D1000 Modem CWMP Exploit Retrieving Wifi Key rev 2 2016-11-29
snort ET CURRENT_EVENTS Successful Personalized Adobe Online PDF Phish 2016-11-28 rev 1 2016-11-29
snort ET CURRENT_EVENTS Successful XBOOMBER Paypal Phish Nov 28 2016 rev 1 2016-11-29
snort ET CURRENT_EVENTS Successful Paypal Phish M2 2016-11-29 rev 1 2016-11-29
snort ET CURRENT_EVENTS Terse POST to Wordpress Folder - Probable Successful Phishing M6 rev 1 2016-11-29
snort ET CURRENT_EVENTS Successful Microsoft Live Email Account Phish 2016-11-29 rev 1 2016-11-29
snort ET CURRENT_EVENTS Successful Wells Fargo Phish 2016-11-28 rev 1 2016-11-28
snort ET CURRENT_EVENTS Successful Ourtime.com Phish 2016-11-28 rev 1 2016-11-28
snort ET TROJAN Win32/VB.SDB CnC Beacon rev 1 2016-11-23
snort ET TROJAN Win32/TrojanDownloader.Delf.BXC CnC Beacon rev 1 2016-11-23
snort ET CURRENT_EVENTS Successful Barclays Phish M1 2016-11-23 rev 1 2016-11-23
snort ET CURRENT_EVENTS Successful HM Revenue Phish 2016-11-23 rev 1 2016-11-23
snort ET CURRENT_EVENTS Successful Wells Fargo Phish M1 2016-09-30 rev 2 2016-11-22
snort ET TROJAN Win32/Ispen BADNEWS CnC Beacon rev 2 2016-11-21
snort ET CURRENT_EVENTS Successful Office 365 Phish 2016-11-18 rev 1 2016-11-18
snort ET CURRENT_EVENTS Successful Generic Wembail Phish M2 2016-11-18 rev 1 2016-11-18
snort ET WEB_SERVER Possible Apache Struts OGNL Expression Injection rev 1 2016-11-18
snort ET CURRENT_EVENTS Successful Wells Fargo Phish M2 2016-11-18 rev 1 2016-11-18
snort ET TROJAN KeyBoy CnC Beacon rev 1 2016-11-18
snort ET TROJAN JS/Nemucod requesting EXE payload 2016-01-28 rev 5 2016-11-18
snort ET CURRENT_EVENTS Successful Wells Fargo Phish M1 2016-11-18 rev 1 2016-11-18
snort ET CURRENT_EVENTS Shared Document Phishing Landing Nov 16 2016 rev 1 2016-11-17
snort ET CURRENT_EVENTS Successful Dropbox Business Phish 2016-11-17 rev 1 2016-11-17
snort ET CURRENT_EVENTS Successful Email Settings Error Phish 2016-11-17 rev 1 2016-11-17
snort ET CURRENT_EVENTS Email Settings Error Phishing Landing Nov 16 2016 rev 1 2016-11-17
snort ET CURRENT_EVENTS Successful Excel Phish 2016-11-17 rev 1 2016-11-17
snort ET CURRENT_EVENTS Successful Paypal Phish M2 2016-11-17 rev 1 2016-11-17
snort ET CURRENT_EVENTS Successful Paypal Phish M1 2016-11-17 rev 1 2016-11-17
snort ET CURRENT_EVENTS Successful Shared Adobe PDF Phish 2016-11-17 rev 1 2016-11-17
snort ET CURRENT_EVENTS Successful Personalized Email Update Phish 2016-11-17 rev 1 2016-11-17