Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS Successful Wells Fargo Mobile Phish 2016-08-01 M1 rev 1 2016-08-01
snort ET CURRENT_EVENTS Wells Fargo Mobile Phishing Landing 2016-08-01 rev 1 2016-08-01
snort ET INFO Base64 Data URI Javascript Refresh - Possible Phishing Landing rev 2 2016-07-29
snort ET CURRENT_EVENTS Evil Redirect Leading to EK Jul 28 2016 rev 1 2016-07-28
snort ET TROJAN Lethic - Client Alive rev 3 2016-07-26
snort ET TROJAN Evil Monero Cryptocurrency Miner Request Pools rev 1 2016-07-21
snort ET CURRENT_EVENTS Successful Webmail Account Upgrade Phish 2016-07-21 rev 1 2016-07-21
snort ET CURRENT_EVENTS Webmail Account Upgrade Phishing Landing 2016-07-20 rev 1 2016-07-21
snort ET WEB_CLIENT Tech Support Phone Scam Landing 2016-07-21 M1 rev 1 2016-07-21
snort ET CURRENT_EVENTS Successful Earthlink Phish 2016-07-19 rev 1 2016-07-19
snort ET POLICY Tripod/Lycos Form Submission - Possible Successful Phish rev 3 2016-07-19
snort ET POLICY Possible Kali Linux hostname in DHCP Request Packet rev 1 2016-07-18
snort ET CURRENT_EVENTS Possible Phishing Landing Obfuscation 2016-03-17 rev 2 2016-07-18
snort ET CURRENT_EVENTS Successful Webmail Account Upgrade Phish 2016-07-15 rev 1 2016-07-15
snort ET CURRENT_EVENTS Webmail Account Upgrade Phishing Landing 2016-07-15 rev 1 2016-07-15
snort ET CURRENT_EVENTS Successful Synchronize Email Account Phish 2016-06-15 rev 1 2016-07-15
snort ET CURRENT_EVENTS Synchronize Email Account Phishing Landing 2016-07-15 rev 1 2016-07-15
snort ET CURRENT_EVENTS Successful Generic Webmail Account Phish 2016-07-15 rev 1 2016-07-15
snort ET CURRENT_EVENTS Successful Hotmail Phish 2016-07-14 rev 1 2016-07-14
snort ET TROJAN Ranscam Ransomware Contact Form rev 1 2016-07-14
snort ET TROJAN SFG Client Information POST rev 1 2016-07-13
snort ET INFO SUSPICIOUS Excel Add-in Download M2 rev 1 2016-07-13
snort ET INFO SUSPICIOUS Excel Add-in Download M1 rev 1 2016-07-13
snort ET CURRENT_EVENTS Successful Adobe Phish M3 2016-07-11 rev 1 2016-07-11
snort ET CURRENT_EVENTS Email Account Exceeded Quota Phishing Landing 2016-07-11 rev 1 2016-07-11
snort ET CURRENT_EVENTS RIG EK Payload Jul 05 2016 rev 1 2016-07-05
snort ET TROJAN Win32/Satana Ransomware Checkin rev 1 2016-06-30
snort ET EXPLOIT Possible CVE-2016-2209 Symantec PowerPoint Parsing Buffer Overflow M2 rev 1 2016-06-29
snort ET EXPLOIT Possible CVE-2016-2209 Symantec PowerPoint Parsing Buffer Overflow M1 rev 1 2016-06-29
snort ET INFO Data Submitted to MyFreeSites.com - Possible Phishing rev 1 2016-06-28
snort ET TROJAN Trojan.Win32.VBKrypt.cugq/Umbra Checkin rev 5 2016-06-28
snort ET WEB_CLIENT Suspicious Compound Refresh - Possible Phishing Redirect 2016-06-09 rev 2 2016-06-27
snort ET CURRENT_EVENTS Mailbox Upgrade Phishing Landing 2016-06-27 rev 1 2016-06-27
snort ET CURRENT_EVENTS Successful Mailbox Upgrade Phish 2016-06-27 M1 rev 1 2016-06-27
snort ET CURRENT_EVENTS Successful Mailbox Upgrade Phish 2016-06-27 M2 rev 1 2016-06-27
snort ET WEB_CLIENT Possible Phishing Data Submitted to yolasite.com rev 1 2016-06-24
snort ET INFO WinHttp AutoProxy Request wpad.dat Possible BadTunnel rev 1 2016-06-23
snort ET CURRENT_EVENTS Successful Wildblue/CenturyLink Phish 2015-12-08 rev 3 2016-06-23
snort ET CURRENT_EVENTS Successful Vmware/Zimbra Phish 2015-09-28 rev 3 2016-06-23
snort ET CURRENT_EVENTS Microsoft Encrypted Email Phishing Landing 2016-06-23 rev 1 2016-06-23