Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS Successful Paypal Phish 2015-12-05 rev 2 2015-12-11
snort ET CURRENT_EVENTS Successful Dropbox Phish M2 2015-12-10 rev 1 2015-12-10
snort ET TROJAN Linux/MayhemBruter Inbound Ping From CnC rev 2 2015-12-10
snort ET CURRENT_EVENTS Successful Halifax Bank Phish M1 2015-12-10 rev 1 2015-12-10
snort ET SCAN Possible Scanning for Vulnerable JBoss rev 1 2015-12-09
snort ET CURRENT_EVENTS Excel Online Phish Landing 2015-12-08 rev 1 2015-12-08
snort ET TROJAN Linux/MayhemBruter Checkin rev 1 2015-12-07
snort ET TROJAN Sednit/AZZY Checkin rev 3 2015-12-05
snort ET TROJAN Linux/KDefend Checkin rev 3 2015-12-04
snort ET TROJAN Backdoor.Win32.Sykipot Checkin rev 2 2015-12-01
snort ET CURRENT_EVENTS Anonisma Phishing Landing 2015-12-01 rev 1 2015-12-01
snort ET CURRENT_EVENTS Successful Chase Phish M2 2015-12-01 rev 1 2015-12-01
snort ET CURRENT_EVENTS Successful Anonisma Phish 2015-12-01 rev 1 2015-12-01
snort ET CURRENT_EVENTS cPanel Phishing Landing 2015-12-01 rev 1 2015-12-01
snort ET WEB_SERVER WebShell - ASPyder - Auth Creds rev 4 2015-11-30
snort ET CURRENT_EVENTS Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 rev 3 2015-11-26
snort ET CURRENT_EVENTS Successful Trademe Phish M3 2015-11-26 rev 1 2015-11-26
snort ET CURRENT_EVENTS Successful Excel Online Phish 2015-11-26 rev 1 2015-11-26
snort ET TROJAN Matryoshka CnC Beacon 1 rev 1 2015-11-25
snort ET CURRENT_EVENTS Possible Evil Redirector Leading to EK June 10 2015 rev 10 2015-11-25
snort ET TROJAN Win32/Swrort.A Checkin 3 rev 1 2015-11-25
snort ET CURRENT_EVENTS Successful SFR Phishing 2015-11-24 rev 1 2015-11-24
snort ET CURRENT_EVENTS Successful Wildblue Phishing M2 2015-11-24 rev 1 2015-11-24
snort ET MOBILE_MALWARE Android/TrojanDropper.Agent.EP HTTP Host rev 1 2015-11-24
snort ET CURRENT_EVENTS Successful Wildblue Phishing M1 2015-11-24 rev 1 2015-11-24
snort ET CURRENT_EVENTS Successful Xoom Phishing 2015-11-24 rev 1 2015-11-24
snort ET TROJAN MegalodonHTTP CoinMiner Activity rev 2 2015-11-23
snort ET TROJAN MegalodonHTTP/LuciferHTTP Client Action rev 3 2015-11-23
snort ET TROJAN MegalodonHTTP CnC Checkin rev 2 2015-11-23
snort ET CURRENT_EVENTS Successful Natwest Bank Phish 2015-11-21 rev 1 2015-11-21
snort ET CURRENT_EVENTS Successful Wells Fargo Phish M2 2015-11-21 rev 1 2015-11-21
snort ET CURRENT_EVENTS Successful Outlook Webmail Phishing M2 2015-11-21 rev 1 2015-11-21
snort ET CURRENT_EVENTS Successful Wells Fargo Phish M1 2015-11-21 rev 1 2015-11-21
snort ET CURRENT_EVENTS Successful Outlook Webmail Phishing 2015-11-21 rev 1 2015-11-21
snort ET CURRENT_EVENTS Outlook Webmail Phishing Landing 2015-11-21 rev 1 2015-11-21
snort ET CURRENT_EVENTS Google Drive Phishing Landing 2015-11-20 rev 1 2015-11-20
snort ET CURRENT_EVENTS Successful Squirrelmail Phishing 2015-11-20 rev 1 2015-11-20
snort ET POLICY IP Lookup Geoip.co.uk rev 1 2015-11-20
snort ET CURRENT_EVENTS Successful Hinet Phish 2015-11-19 rev 1 2015-11-19
snort ET CURRENT_EVENTS Successful Tradekey Phish 2015-11-19 rev 1 2015-11-19