Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Google Drive Phish M1 2016-12-02 rev 7 2024-04-13
suricata ET MALWARE Pteranodon Variant 2 Backdoor Checkin rev 5 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 6 rev 6 2024-04-13
suricata ET ADWARE_PUP PCAcceleratePro PUA/Adware User-Agent rev 7 2024-04-13
suricata ET PHISHING Successful Blockchain Account Phish Aug 19 2016 rev 7 2024-04-13
suricata ET EXPLOIT Hootoo TripMate Attempted Remote Command Injection Outbound rev 4 2024-04-13
suricata ET MALWARE Peppy/KeeOIL Google Connectivity Check rev 4 2024-04-13
suricata ET PHISHING Successful Santander Bank Phish 2016-10-28 rev 7 2024-04-13
suricata ET MALWARE OSX/Mughthesec/SafeFinder/OperatorMac Rogue Search Engine DNS Query Observed rev 7 2024-04-13
suricata ET PHISHING Successful HM Revenue & Customs Phish M1 Apr 07 2017 rev 6 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup symanttec.org rev 7 2024-04-13
suricata ET PHISHING Successful US Bank Phish M1 2015-12-22 rev 7 2024-04-13
suricata ET PHISHING Successful Excel Phish 2016-11-17 rev 8 2024-04-13
suricata ET MALWARE CDT Credphish/Netwire Campaign DNS Lookup rev 6 2024-04-13
suricata ET MALWARE Java Archive sent when remote host claims to send an image rev 7 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 6 rev 6 2024-04-13
suricata ET PHISHING Successful Postbank Online Banking Phish M2 2016-09-30 rev 5 2024-04-13
suricata ET PHISHING Successful DHL Phish 2016-10-07 rev 5 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 2016-09-29 rev 7 2024-04-13
suricata ET USER_AGENTS Microsoft Device Metadata Retrieval Client User-Agent rev 5 2024-04-13
suricata ET ADWARE_PUP PUP W32/DownloadGuide.D rev 5 2024-04-13
suricata ET PHISHING Successful Battle.net Phish 2015-09-22 rev 5 2024-04-13
suricata ET MALWARE ABUSE.CH TorrenLocker Payment Domain Detected rev 5 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server rev 3 2024-04-13
suricata ET MALWARE S400 RAT Client Checkin via Discord rev 3 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup windows-updater.com rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2016-10-21 rev 8 2024-04-13
suricata ET USER_AGENTS Aria2 User-Agent rev 4 2024-04-13
suricata ET PHISHING Successful IRS Phish 2016-01-23 rev 8 2024-04-13
suricata ET MALWARE Critroni Variant .onion Proxy Domain rev 5 2024-04-13
suricata ET SCAN DirBuster Web App Scan in Progress rev 8 2024-04-13
suricata ET MALWARE DeepEnd Research Ransomware CrypMIC Payment Onion Domain rev 6 2024-04-13
suricata ET MALWARE ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET MALWARE APT12 THREEBYTE DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Chase Phish M2 2016-12-07 rev 6 2024-04-13
suricata ET MALWARE CDT Credphish/Netwire Campaign DNS Lookup rev 6 2024-04-13
suricata ET MALWARE Bossabot DDoS tool RFI attempt rev 5 2024-04-13
suricata ET PHISHING Successful Dropbox Phish 2016-10-14 rev 7 2024-04-13