Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Email Login Phish 2016-06-02 rev 6 2024-04-13
suricata ET PHISHING Successful Adobe Online Account Phish 2015-08-21 rev 6 2024-04-13
suricata ET EXPLOIT HiSilicon DVR - Buffer Overflow in Builtin Web Server rev 5 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2019-04-12 rev 5 2024-04-13
suricata ET HUNTING Suspicious TLS SNI Request for Root rev 3 2024-04-13
suricata ET MALWARE WindowsEnterpriseSuite FakeAV get_product_domains.php rev 7 2024-04-13
suricata ET PHISHING Successful Bank of America Phish 2016-10-14 rev 9 2024-04-13
suricata ET MALWARE Possible Magecart Credit Card Information JS Script rev 3 2024-04-13
suricata ET MALWARE Possible Winnti-related DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Account Phish 2015-10-16 rev 7 2024-04-13
suricata ET PHISHING Successful Apple Store Phish M1 2016-12-29 rev 6 2024-04-13
suricata ET MALWARE Ransomware CrypMIC Payment Onion Domain rev 6 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 23 rev 6 2024-04-13
suricata ET PHISHING Successful Bank of America Phish 2016-12-05 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-10-23 rev 7 2024-04-13
suricata ET ADWARE_PUP [PTsecurity] WebToolbar.Win32.Searchbar.k HTTP JSON Artifact rev 4 2024-04-13
suricata ET MOBILE_MALWARE IOS_XAGENT UA rev 6 2024-04-13
suricata ET MALWARE XCodeGhost DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish Mar 22 2017 rev 5 2024-04-13
suricata ET ADWARE_PUP Sogou Toolbar Checkin rev 10 2024-04-13
suricata ET PHISHING Successful Barclays Phish M2 2016-09-09 rev 6 2024-04-13
suricata ET PHISHING Successful Apple Phish M1 2016-11-15 rev 5 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 2016-12-05 rev 7 2024-04-13
suricata ET PHISHING Tripod/Lycos Form Submission - Possible Successful Phish rev 6 2024-04-13
suricata ET MALWARE MICROPSIA HTTP Failover Reporting Infected System Information and RAT Version rev 4 2024-04-13
suricata ET PHISHING Successful Citizenbank Phish 2016-05-24 M1 rev 5 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET PHISHING Successful Apple Phish M3 2016-09-29 rev 6 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 11 rev 6 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 41 rev 6 2024-04-13
suricata ET MALWARE EncryptorRaas .onion Proxy Domain rev 5 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13
suricata ET ADWARE_PUP SearchProtect PUA User-Agent Observed rev 5 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup microsofi.org rev 7 2024-04-13
suricata ET PHISHING Successful Impots.gouv.fr Phish 2016-10-24 rev 7 2024-04-13
suricata ET MALWARE CDT Credphish/Netwire Campaign DNS Lookup rev 6 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup adawareblock.com rev 7 2024-04-13
suricata ET MALWARE TeslaCrypt/AlphaCrypt Payment DNS Lookup rev 5 2024-04-13
suricata ET SCAN PHP Attack Tool Morfeus F Scanner rev 17 2024-04-13