Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful US Bank Phish 2016-06-09 M2 rev 5 2024-04-13
suricata ET PHISHING Successful iTunes Connect Phish M2 2016-12-13 rev 7 2024-04-13
suricata ET MALWARE Critroni Variant .onion Proxy Domain rev 5 2024-04-13
suricata ET PHISHING Successful iCloud Phish 2015-12-02 rev 6 2024-04-13
suricata ET MALWARE APT32 Win32/Ratsnif Submitting Output of Command to CnC rev 4 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 2016-10-17 rev 7 2024-04-13
suricata ET MALWARE CustomRAT DNS lookup rev 6 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 5 rev 6 2024-04-13
suricata ET PHISHING Successful Apple Phish M1 2016-02-23 rev 8 2024-04-13
suricata ET PHISHING Successful PNC Bank Phish M2 2016-10-14 rev 7 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 24 rev 6 2024-04-13
suricata ET PHISHING Successful Apple Phish M2 2016-10-07 rev 7 2024-04-13
suricata ET PHISHING Successful Made In China Phish 2016-09-28 rev 7 2024-04-13
suricata ET MALWARE Worm.VBS.Jenxcus.H User Agent rev 6 2024-04-13
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Femas.b Apps List Exfil rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Account Phish Oct 30 rev 5 2024-04-13
suricata ET ADWARE_PUP OSX ADWARE/Mackeeper Checkin rev 6 2024-04-13
suricata ET ADWARE_PUP klm123.com Spyware User Agent rev 18 2024-04-13
suricata ET MALWARE Win32.Fareit.A/Pony Downloader Checkin rev 8 2024-04-13
suricata ET PHISHING Successful National Bank Phish Mar 13 2017 rev 5 2024-04-13
suricata ET PHISHING Successful Apple Phish M1 Feb 06 2016 rev 6 2024-04-13
suricata ET PHISHING Successful Bank of America Phish M1 2016-08-31 rev 7 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 15 rev 6 2024-04-13
suricata ET PHISHING Facebook Phishing Domain in DNS Lookup rev 4 2024-04-13
suricata ET MALWARE MICROPSIA HTTP Failover Response M2 rev 5 2024-04-13
suricata ET ADWARE_PUP Win32/SWInformer.B Checkin rev 9 2024-04-13
suricata ET MALWARE Sharik/Smoke Fake 404 Response with Payload Location rev 4 2024-04-13
suricata ET PHISHING Successful Apple Phish M1 2015-12-02 rev 7 2024-04-13
suricata ET PHISHING Successful Linkedin Phish 2016-11-18 rev 6 2024-04-13
suricata ET PHISHING Possible Successful Tripod.com Phish 2016-03-31 rev 5 2024-04-13
suricata ET EXPLOIT Possible Tor/Noscript JS Bypass rev 4 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-10-23 rev 7 2024-04-13
suricata ET PHISHING Successful AOL Phish 2016-10-24 rev 7 2024-04-13
suricata ET EXPLOIT Possible ZTE ZXV10 H108L Router Root RCE Attempt rev 4 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish M2 2015-11-21 rev 7 2024-04-13
suricata ET MALWARE Cryptowall 3.0 .onion Proxy Domain rev 5 2024-04-13
suricata ET ADWARE_PUP W32/GameVance Adware User Agent rev 9 2024-04-13
suricata ET MALWARE WSHRAT CnC Checkin rev 3 2024-04-13
suricata ET MALWARE APT32 Komprogo DNS Lookup rev 6 2024-04-13