Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Wells Fargo Phish M2 2015-11-21 rev 7 2024-04-13
suricata ET PHISHING Possible Successful Tripod.com Phish 2016-03-31 rev 5 2024-04-13
suricata ET PHISHING Successful Account Update Phish 2015-09-01 rev 6 2024-04-13
suricata ET MALWARE CustomRAT DNS lookup rev 6 2024-04-13
suricata ET INFO External IP Check myexternalip.com rev 7 2024-04-13
suricata ET PHISHING Successful Apple Phish M2 2016-10-07 rev 7 2024-04-13
suricata ET ADWARE_PUP Win32/DealPly Reporting Details to CnC rev 5 2024-04-13
suricata ET PHISHING Successful Adobe Shared Document Phish 2016-09-29 rev 6 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET EXPLOIT Hootoo TripMate Attempted Remote Command Injection Inbound rev 4 2024-04-13
suricata ET PHISHING Successful iCloud Phish 2015-12-02 rev 6 2024-04-13
suricata ET MALWARE Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET ADWARE_PUP W32/GameVance Adware User Agent rev 9 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup check-fix.com rev 7 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 24 rev 6 2024-04-13
suricata ET PHISHING Successful Zimbra Phish 2015-10-30 rev 8 2024-04-13
suricata ET EXPLOIT_KIT BottleEK Landing rev 4 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET MALWARE ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET PHISHING Successful Adobe Shared Document Phish 2016-08-10 rev 6 2024-04-13
suricata ET MALWARE APT32 Win32/Ratsnif Submitting Output of Command to CnC rev 4 2024-04-13
suricata ET PHISHING Successful Barclays Phish M3 2016-09-09 rev 6 2024-04-13
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Femas.b Apps List Exfil rev 6 2024-04-13
suricata ET MALWARE LokiBot Related DNS query rev 7 2024-04-13
suricata ET PHISHING L33bo Phishing Kit - Successful Credential Phish M3 2016-03-29 rev 6 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET PHISHING Successful PNC Bank Phish M2 2016-10-14 rev 7 2024-04-13
suricata ET EXPLOIT Technicolor TD5130.2 - Remote Command Execution rev 4 2024-04-13
suricata ET PHISHING Successful Outlook Phish 2016-10-03 rev 7 2024-04-13
suricata ET ADWARE_PUP STOPzilla Download Accelerator Activity rev 3 2024-04-13
suricata ET PHISHING Successful iTunes Connect Phish M3 2016-12-13 rev 7 2024-04-13
suricata ET INFO Middle Earth Illegal Marketplace Tor Hidden Service DNS Query rev 5 2024-04-13
suricata ET MALWARE Cryptowall 3.0 .onion Proxy Domain rev 5 2024-04-13
suricata ET PHISHING Successful Paypal Phish M3 2016-10-06 rev 7 2024-04-13
suricata ET PHISHING Successful PDF Online Phish 2016-12-19 rev 8 2024-04-13
suricata ET MALWARE Cayosin Botnet User-Agent Observed M2 rev 6 2024-04-13
suricata ET MALWARE Observed DNS Query to Gryphon CnC Domain / GlobeImposter Payment Domain rev 6 2024-04-13
suricata ET MALWARE Operation Tripoli Related CnC Checkin rev 4 2024-04-13
suricata ET PHISHING Successful Linkedin Phish 2016-09-27 rev 7 2024-04-13
suricata ET MALWARE OSX/KeRanger Ransomware CnC DNS Request 4 rev 5 2024-04-13