Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET EXPLOIT Possible WebShell JPEG Upload rev 3 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup azureon-line.com rev 7 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 7 rev 6 2024-04-13
suricata ET PHISHING Successful UK Tax Phishing M2 2016-02-01 rev 6 2024-04-13
suricata ET PHISHING Successful DHL Phish 2015-09-17 rev 6 2024-04-13
suricata ET EXPLOIT Linksys WRT54GL Router DNS Change POST Request rev 6 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET PHISHING Successful Email Settings Phish 2016-10-28 rev 6 2024-04-13
suricata ET PHISHING Successful Adobe Phish 2016-09-14 rev 6 2024-04-13
suricata ET PHISHING Successful Microsoft Live Email Account Phish 2016-11-29 rev 7 2024-04-13
suricata ET PHISHING Successful View Invoice Phish M2 2016-10-05 rev 7 2024-04-13
suricata ET PHISHING Successful Dropbox Phish 2016-05-16 rev 8 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2015-09-04 rev 8 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 14 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M3 2016-10-06 rev 7 2024-04-13
suricata ET PHISHING Successful Bank of Oklahoma Phish M1 Jul 21 2016 rev 7 2024-04-13
suricata ET ADWARE_PUP Lookup of Malware Domain twothousands.cm Likely Infection rev 7 2024-04-13
suricata ET MALWARE Ransomware Locky .onion Payment Domain rev 5 2024-04-13
suricata ET HUNTING Suspicious EXE Download Content-Type image/jpeg rev 4 2024-04-13
suricata ET INFO Python-urllib/ Suspicious User Agent rev 10 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET PHISHING Successful LinkedIn Phish 2015-09-17 rev 7 2024-04-13
suricata ET PHISHING Successful Ebay Phish M1 2016-12-29 rev 7 2024-04-13
suricata ET MALWARE Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET PHISHING Successful SeniorPeopleMeet Phish M1 2016-09-14 rev 5 2024-04-13
suricata ET MALWARE Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET MALWARE APT28/SEDNIT Uploader Variant DNS Lookup rev 7 2024-04-13
suricata ET HUNTING Suspicious POST to Wordpress Folder - Possible Successful Banking Phish rev 3 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET MOBILE_MALWARE DNS Android/Spy.Feabme.A Query rev 6 2024-04-13
suricata ET MALWARE Danabot UA Observed rev 4 2024-04-13
suricata ET USER_AGENTS Suspicious User-Agent Mozilla/3.0 rev 11 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET ADWARE_PUP Best-targeted-traffic.com Spyware Install rev 10 2024-04-13
suricata ET PHISHING Possible Successful *.myjino. ru Phish 2016-12-16 rev 10 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 7 rev 6 2024-04-13
suricata ET PHISHING Successful Dubai Islamic Internet Bank Phish 2016-12-20 rev 7 2024-04-13
suricata ET MALWARE xpsecuritycenter.com Fake AntiVirus GET-Install Checkin rev 8 2024-04-13
suricata ET PHISHING Successful DrSpam Phish 2016-06-08 M2 rev 5 2024-04-13