Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Microsoft Account Phish 2019-01-29 rev 3 2024-04-13
suricata ET ADWARE_PUP OSX ADWARE/Mackeeper Checkin rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Account Phish Oct 30 rev 5 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2019-08-29 rev 4 2024-04-13
suricata ET EXPLOIT_KIT BottleEK Landing rev 4 2024-04-13
suricata ET MALWARE MICROPSIA HTTP Failover Response M2 rev 5 2024-04-13
suricata ET HUNTING Suspicious HTTP POST Only Containing Pass - Possible Phishing rev 3 2024-04-13
suricata ET INFO IncrediMail Install Callback rev 6 2024-04-13
suricata ET ADWARE_PUP Hex Encoded IP HTTP Request - Likely Malware rev 8 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish 2016-10-05 rev 7 2024-04-13
suricata ET PHISHING Successful Made In China Phish 2016-09-28 rev 7 2024-04-13
suricata ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server rev 3 2024-04-13
suricata ET PHISHING Successful Apple Phish M1 Feb 06 2016 rev 6 2024-04-13
suricata ET PHISHING Successful Chase Phish M2 2016-12-07 rev 6 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish M2 2016-09-16 rev 5 2024-04-13
suricata ET PHISHING Successful Apple Store Transaction Cancellation Phish 2016-08-30 rev 6 2024-04-13
suricata ET PHISHING Successful Zimbra Phish 2015-10-30 rev 8 2024-04-13
suricata ET INFO Peach C++ Library User Agent Outbound rev 7 2024-04-13
suricata ET PHISHING Successful Chase Phish 2016-10-31 rev 7 2024-04-13
suricata ET MALWARE Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET MALWARE WSHRAT Credential Dump Module Download Command Inbound rev 4 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 6 2024-04-13
suricata ET MALWARE APT28 Zebrocy/Zekapab Reporting to CnC M3 rev 3 2024-04-13
suricata ET PHISHING Successful Bank of America Phish M2 2016-08-31 rev 7 2024-04-13
suricata ET PHISHING Successful Bank of America Phish 2015-10-29 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 2016-10-05 rev 5 2024-04-13
suricata ET PHISHING Successful US Bank Phish 2016-06-09 M2 rev 5 2024-04-13
suricata ET MALWARE Win32.Fareit.A/Pony Downloader Checkin rev 8 2024-04-13
suricata ET MALWARE APT32 Win32/Ratsnif Submitting Output of Command to CnC rev 4 2024-04-13
suricata ET PHISHING Successful iTunes Connect Phish M2 2016-12-13 rev 7 2024-04-13
suricata ET PHISHING Successful Generic Banking Phish 2016-10-28 rev 8 2024-04-13
suricata ET MALWARE APT28 Zebrocy/Zekapab CnC Checkin rev 4 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2019-08-29 rev 3 2024-04-13
suricata ET PHISHING Successful Mailbox Upgrade Phish 2016-06-27 M2 rev 5 2024-04-13
suricata ET PHISHING Successful Adobe Phish 2015-08-31 rev 6 2024-04-13
suricata ET PHISHING Possible Successful Tripod.com Phish 2016-03-31 rev 5 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish M2 2015-11-21 rev 7 2024-04-13
suricata ET PHISHING Successful Wells Fargo Account Phish 2015-08-18 rev 7 2024-04-13
suricata ET MALWARE Cryptowall 3.0 .onion Proxy Domain rev 5 2024-04-13
suricata ET PHISHING Successful Apple Phish M2 2016-10-07 rev 7 2024-04-13