Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Bank of America Phish M4 2016-10-27 rev 6 2024-04-13
suricata ET MALWARE OSX/KeRanger Ransomware CnC DNS Request 3 rev 5 2024-04-13
suricata ET MOBILE_MALWARE Android/Kemoge DNS Lookup rev 6 2024-04-13
suricata ET SCAN SQL Power Injector SQL Injection User Agent Detected rev 8 2024-04-13
suricata ET PHISHING Microsoft Office Phishing Landing 2016-12-18 rev 7 2024-04-13
suricata ET MALWARE Lazarus Decafett DNS Lookup 1 rev 6 2024-04-13
suricata ET PHISHING Successful Tradekey Phish 2015-11-19 rev 7 2024-04-13
suricata ET MALWARE Possible Winnti-related DNS Lookup rev 6 2024-04-13
suricata ET MALWARE ELF.SystemdMiner C2 Domain in DNS Lookup rev 5 2024-04-13
suricata ET USER_AGENTS Suspicious User-Agent Moxilla rev 8 2024-04-13
suricata ET USER_AGENTS Tear Application User-Agent Detected rev 10 2024-04-13
suricata ET PHISHING Successful Chase Phish 2015-09-24 rev 7 2024-04-13
suricata ET MALWARE CenterPOS CnC rev 5 2024-04-13
suricata ET HUNTING Suspicious HTTP Referer C Drive Path rev 7 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup adobeincorp.com rev 7 2024-04-13
suricata ET MALWARE Possible Winnti-related DNS Lookup rev 6 2024-04-13
suricata ET MALWARE CryptON/Nemesis/X3M Ransomware Onion Domain rev 6 2024-04-13
suricata ET MOBILE_MALWARE ANDROIDOS_LEAKERLOCKER.HRX DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-12-08 M3 rev 7 2024-04-13
suricata ET MALWARE DNS Query for Cloud Atlas ecolines.es rev 7 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 16 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-10-28 rev 5 2024-04-13
suricata ET MALWARE Win32/Emotet CnC Checkin Response rev 5 2024-04-13
suricata ET MALWARE Win32.Zbot.ivgw Downloading EXE rev 9 2024-04-13
suricata ET MALWARE W32.Razy Inject Domain in DNS Lookup rev 5 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 13 rev 6 2024-04-13
suricata ET PHISHING Successful HM Revenue & Customs Phish M2 Apr 07 2017 rev 5 2024-04-13
suricata ET EXPLOIT_KIT Neutrino Exploit Kit Redirector To Landing Page rev 5 2024-04-13
suricata ET PHISHING Successful Generic Mailbox Phish 2019-03-07 rev 3 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-11-18 rev 7 2024-04-13
suricata ET PHISHING Suspicious Fake Login - Possible Phishing - 2018-12-31 rev 4 2024-04-13
suricata ET ADWARE_PUP Loadmoney.A Checkin 5 rev 9 2024-04-13
suricata ET PHISHING Successful Apple ID Phish M1 2016-10-04 rev 7 2024-04-13
suricata ET PHISHING Successful WhatsApp Phish M2 2016-12-07 rev 5 2024-04-13
suricata ET EXPLOIT Possible Linksys WAP54Gv3 Remote Debug Root Shell Exploitation Attempt rev 4 2024-04-13
suricata ET MALWARE ProjectSauron Remsec/HTTPBrowser/Pisloader Covert DNS CnC Channel TXT Lookup rev 10 2024-04-13
suricata ET PHISHING Successful RBC Royal Bank Phish Jan 30 2017 rev 6 2024-04-13
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Femas.b DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2016-10-06 rev 7 2024-04-13
suricata ET MALWARE XCodeGhost DNS Lookup rev 6 2024-04-13