Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Banco do Brasil Phish M2 Sep 29 2017 rev 4 2024-04-13
suricata ET PHISHING Possible Successful *.myjino. ru Phish 2016-12-16 rev 10 2024-04-13
suricata ET MALWARE Cayosin Botnet User-Agent Observed M2 rev 6 2024-04-13
suricata ET PHISHING Successful PDF Online Phish 2016-12-19 rev 8 2024-04-13
suricata ET PHISHING Successful FR Carte Bleue / BCP Phish 2016-09-06 rev 6 2024-04-13
suricata ET PHISHING Successful Personalized Email Update Phish 2016-11-17 rev 5 2024-04-13
suricata ET PHISHING Suspicious Byethost Phishing Redirect 2016-10-04 rev 5 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2018-04-16 rev 4 2024-04-13
suricata ET PHISHING Successful Yahoo Phish 2016-07-11 rev 6 2024-04-13
suricata ET PHISHING Successful Wildblue Phishing M2 2015-11-24 rev 7 2024-04-13
suricata ET PHISHING Successful Adobe Phish M1 2016-07-11 rev 6 2024-04-13
suricata ET PHISHING Successful Personalized Adobe Online PDF Phish 2016-11-28 rev 5 2024-04-13
suricata ET MALWARE Turla SHIRIME DNS Lookup rev 6 2024-04-13
suricata ET WEB_SERVER DataCha0s Web Scanner/Robot rev 42 2024-04-13
suricata ET MALWARE Critroni Variant .onion Proxy Domain rev 5 2024-04-13
suricata ET PHISHING Successful WhatsApp Payment Phish M2 2016-11-15 rev 7 2024-04-13
suricata ET MALWARE OSX/Shlayer CnC Landing M2 rev 4 2024-04-13
suricata ET PHISHING Successful Chase Phish 2016-10-25 rev 5 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup checkwinframe.com rev 7 2024-04-13
suricata ET PHISHING Successful DrSpam Phish 2016-06-08 M1 rev 5 2024-04-13
suricata ET PHISHING Successful BBVA Compass Account Phish 2015-08-21 rev 6 2024-04-13
suricata ET PHISHING Successful Carribean International Bank Account Phish 2015-08-25 rev 6 2024-04-13
suricata ET MALWARE OSX Backdoor Quimitchin DNS Lookup rev 6 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 16 rev 6 2024-04-13
suricata ET MALWARE CFR DRIVEBY CVE-2012-4792 DNS Query for C2 domain rev 7 2024-04-13
suricata ET INFO PCHunter Download Observed rev 3 2024-04-13
suricata ET MALWARE Lazarus Decafett DNS Lookup 2 rev 6 2024-04-13
suricata ET PHISHING Successful DHL Phish 2016-07-11 rev 6 2024-04-13
suricata ET PHISHING Successful Earthlink Phish 2016-10-21 rev 7 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish 2021-03-16 rev 3 2024-04-13
suricata ET MALWARE OSX/WireLurker DNS Query Domain manhuaba.com.cn rev 6 2024-04-13
suricata ET MALWARE OSX/KeRanger Ransomware CnC DNS Request 4 rev 5 2024-04-13
suricata ET PHISHING Successful Linkedin Phish 2016-09-27 rev 7 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish M1 2016-12-29 rev 7 2024-04-13
suricata ET MALWARE Operation Tripoli Related CnC Checkin rev 4 2024-04-13
suricata ET INFO WinRM wsman Access - Possible Lateral Movement rev 4 2024-04-13
suricata ET MALWARE Observed DNS Query to Gryphon CnC Domain / GlobeImposter Payment Domain rev 6 2024-04-13
suricata ET PHISHING Successful Adobe Shared Document Phish 2016-11-15 rev 6 2024-04-13
suricata ET ADWARE_PUP LNKR CnC Activity M3 rev 6 2024-04-13
suricata ET PHISHING Successful Sparkasse Credential Phish M1 2022-04-13 rev 3 2024-04-13