Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET ADWARE_PUP W32/InstallRex.Adware Report CnC Beacon rev 5 2024-04-13
suricata ET INFO EXE - Served Inline HTTP rev 10 2024-04-13
suricata ET PHISHING Successful Bradesco Bank Phish M2 Jan 05 2017 rev 7 2024-04-13
suricata ET MALWARE W32/Symmi Remote File Injector Initial CnC Beacon rev 6 2024-04-13
suricata ET MALWARE S400 RAT Client Checkin via Discord rev 3 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET EXPLOIT Possible WebShell GIF Upload rev 3 2024-04-13
suricata ET SCAN DirBuster Web App Scan in Progress rev 8 2024-04-13
suricata ET PHISHING Successful Monzo Credential Phish M2 2022-02-17 rev 3 2024-04-13
suricata ET PHISHING Successful Generic Credential Phish 2015-10-03 rev 7 2024-04-13
suricata ET MALWARE Spora Ransomware DNS Query rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish M3 2016-10-26 rev 8 2024-04-13
suricata ET PHISHING Successful Instagram Phish Mar 14 2017 rev 5 2024-04-13
suricata ET PHISHING Successful Google Drive Phish M2 2016-08-25 rev 8 2024-04-13
suricata ET MALWARE MSIL/KeyRedirEx Banker Receiving Exit Instruction rev 6 2024-04-13
suricata ET USER_AGENTS Node XMLHTTP User-Agent rev 5 2024-04-13
suricata ET PHISHING Successful Webmail Account Phish 2015-09-02 rev 7 2024-04-13
suricata ET PHISHING Successful Shipping Document Phish 2015-09-29 rev 8 2024-04-13
suricata ET PHISHING Successful Barclays Phish M2 2016-10-06 rev 6 2024-04-13
suricata ET PHISHING Successful RBC Royal Bank Phish Mar 27 2017 rev 5 2024-04-13
suricata ET PHISHING Successful Apple Phish M1 2016-09-29 rev 5 2024-04-13
suricata ET MALWARE Possible Outbound WebShell GIF rev 5 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET MALWARE ABUSE.CH TorrenLocker Payment Domain Detected rev 5 2024-04-13
suricata ET PHISHING GOV UK Possible COVID-19 Phish 2020-04-06 rev 4 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-12-07 rev 7 2024-04-13
suricata ET PHISHING Successful iTunes Connect Phish M1 2016-10-21 rev 7 2024-04-13
suricata ET WEB_CLIENT Fake 404 With Hidden Login Form rev 5 2024-04-13
suricata ET PHISHING Successful PNC Bank Phish M1 2016-10-14 rev 7 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup testsnetcontrol.com rev 7 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2016-12-09 rev 5 2024-04-13
suricata ET MALWARE ABUSE.CH Locky Domain rev 5 2024-04-13
suricata ET ADWARE_PUP Conduit Trovi Adware/PUA rev 5 2024-04-13
suricata ET PHISHING Successful Apple Phish 2016-10-05 rev 7 2024-04-13
suricata ET MALWARE Stabuniq Checkin rev 6 2024-04-13
suricata ET ADWARE_PUP Loadmoney.A Checkin 4 rev 8 2024-04-13
suricata ET PHISHING Successful Bradesco Bank Phish M1 Jan 05 2017 rev 5 2024-04-13
suricata ET MOBILE_MALWARE Android/Netisend.A Posting Information to CnC rev 8 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup updatesoftware24.com rev 7 2024-04-13