Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS Successful Personalized Email Update Phish 2016-11-17 rev 1 2016-11-17
snort ET INFO Embedded Executable File in PDF - This Program Cannot Be Run in DOS Mode rev 5 2016-11-16
snort ET CURRENT_EVENTS Successful Netflix Phish 2016-11-15 rev 1 2016-11-15
snort ET EXPLOIT REDIS Attemted SSH Authorized Key Writing Attempt rev 1 2016-11-15
snort ET EXPLOIT REDIS Attempted SSH Key Upload rev 1 2016-11-15
snort ET CURRENT_EVENTS Successful Apple Phish M2 2016-11-15 rev 1 2016-11-15
snort ET CURRENT_EVENTS Successful WhatsApp Payment Phish M2 2016-11-15 rev 1 2016-11-15
snort ET CURRENT_EVENTS Successful Apple Phish M1 2016-11-15 rev 1 2016-11-15
snort ET CURRENT_EVENTS Successful DHL Phish 2016-11-15 rev 1 2016-11-15
snort ET TROJAN Alphacrypt/TeslaCrypt Ransomware CnC Beacon rev 4 2016-11-15
snort ET SCAN Redis SSH Key Overwrite Probing rev 2 2016-11-15
snort ET MOBILE_MALWARE Android.Trojan.HiddenApp.OU Checkin rev 1 2016-11-15
snort ET CURRENT_EVENTS Successful WhatsApp Payment Phish M1 2016-11-15 rev 1 2016-11-15
snort ET TROJAN CerberTear Ransomware CnC Checkin rev 1 2016-11-14
snort ET TROJAN MSIL/Alcatrez Locker Ransomware CnC Checkin rev 1 2016-11-14
snort ET TROJAN Sednit/APT28/Sofacy Delphocy CnC Beacon rev 1 2016-11-08
snort ET TROJAN Houdini/Hworm CnC Checkin M1 rev 2 2016-11-03
snort ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher Sending Credit Card Info rev 2 2016-11-03
snort ET TROJAN Moose CnC Request M1 rev 2 2016-11-02
snort ET TROJAN Moose CnC Request M2 rev 2 2016-11-02
snort ET TROJAN Moose CnC Response rev 2 2016-11-02
snort ET MOBILE_MALWARE Adware.Adwo.A rev 1 2016-11-01
snort ET TROJAN Razy Variant Checkin rev 8 2016-11-01
snort ET P2P Vuze BT UDP Connection rev 7 2016-11-01
snort ET CURRENT_EVENTS Successful Impots.gouv.fr Phish 2016-10-31 rev 1 2016-10-31
snort ET CURRENT_EVENTS Successful Paypal Phish 2016-10-31 rev 1 2016-10-31
snort ET CURRENT_EVENTS Successful American Express Phish M1 2016-10-31 rev 1 2016-10-31
snort ET EXPLOIT D-Link DSL-2740R Remote DNS Change Attempt rev 2 2016-10-31
snort ET CURRENT_EVENTS Successful Dropbox Phish 2016-09-29 rev 2 2016-10-31
snort ET CURRENT_EVENTS Successful Office 365 Phish 2016-10-31 rev 1 2016-10-31
snort ET CURRENT_EVENTS Successful Chase Phish 2016-10-31 rev 1 2016-10-31
snort ET CURRENT_EVENTS Successful American Express Phish M2 2016-10-31 rev 1 2016-10-31
snort ET CURRENT_EVENTS Successful Email Settings Phish 2016-10-28 rev 1 2016-10-28
snort ET CURRENT_EVENTS Successful Excel Online Phish 2016-10-05 rev 2 2016-10-28
snort ET CURRENT_EVENTS Successful Santander Bank Phish 2016-10-28 rev 1 2016-10-28
snort ET CURRENT_EVENTS Successful HM Revenue Phish 2016-10-06 rev 2 2016-10-27
snort ET CURRENT_EVENTS Successful Generic Phish 2016-10-27 rev 1 2016-10-27
snort ET TROJAN Win32/Jackpot Ransomware CnC Checkin rev 1 2016-10-27
snort ET INFO Possible EXE Download From Suspicious TLD rev 1 2016-10-27
snort ET CURRENT_EVENTS Successful Outlook Phish 2016-10-26 rev 1 2016-10-26