Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Sofacy DNS Lookup rev 6 2024-04-13
suricata ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound rev 3 2024-04-13
suricata ET PHISHING Successful Westpac Bank Phish 2016-08-31 rev 7 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET PHISHING Successful iCloud Phish 2015-12-02 rev 6 2024-04-13
suricata ET PHISHING Successful National Bank Phish Jan 05 2017 rev 6 2024-04-13
suricata ET PHISHING Successful Gmail Account Update Phish 2016-05-10 rev 7 2024-04-13
suricata ET PHISHING Successful Workspace Phish 2016-01-26 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-10-23 rev 7 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 6 2024-04-13
suricata ET MALWARE CryptoWall/TeslaCrypt Payment Domain rev 6 2024-04-13
suricata ET MALWARE Critroni Variant .onion Proxy Domain rev 5 2024-04-13
suricata ET MALWARE APT32 Komprogo DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Impots.gouv.fr Phish 2016-10-31 rev 5 2024-04-13
suricata ET MALWARE Observed DNS Query to Reborn/Ovidiy Stealer CnC Domain rev 6 2024-04-13
suricata ET PHISHING L33bo Phishing Kit - Successful Credential Phish M3 2016-03-29 rev 6 2024-04-13
suricata ET PHISHING Successful DHL Phish 2015-11-14 rev 6 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 1 rev 6 2024-04-13
suricata ET MALWARE Banker PWS/Infostealer HTTP GET Checkin rev 11 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 2016-10-17 rev 7 2024-04-13
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher DNS Lookup rev 6 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET MALWARE Perl/Calfbot C&C DNS request rev 11 2024-04-13
suricata ET ADWARE_PUP Win32/DealPly Reporting Details to CnC rev 5 2024-04-13
suricata ET PHISHING Successful Amazon Account Phish M3 2015-08-21 rev 6 2024-04-13
suricata ET PHISHING Terse POST to Wordpress Folder - Probable Successful Phishing M3 rev 5 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup microsofi.org rev 7 2024-04-13
suricata ET HUNTING Suspicious HTTP POST Only Containing Password - Possible Phishing rev 3 2024-04-13
suricata ET MALWARE OSX/Proton.B DNS Lookup rev 7 2024-04-13
suricata ET MALWARE Observed DNS Query to Known Fenrir Ransomware CnC Domain rev 6 2024-04-13
suricata ET ADWARE_PUP SilverSpeedup Generic PUA Software UA rev 3 2024-04-13
suricata ET PHISHING Successful iTunes Connect Phish M1 2016-12-13 rev 7 2024-04-13
suricata ET PHISHING Successful Webmail Account Upgrade Phish 2016-07-15 rev 7 2024-04-13
suricata ET PHISHING Successful WeTransfer Phish Oct 04 2016 rev 5 2024-04-13
suricata ET MALWARE TeslaCrypt/AlphaCrypt Payment DNS Lookup rev 5 2024-04-13
suricata ET MALWARE ServHelper CnC Inital Checkin rev 4 2024-04-13
suricata ET PHISHING Successful Google Docs Phish 2016-09-01 rev 5 2024-04-13
suricata ET PHISHING Successful Google Drive Phish M1 2016-09-01 rev 6 2024-04-13
suricata ET MALWARE ABUSE.CH Locky Payment Domain Detected rev 5 2024-04-13
suricata ET PHISHING Successful Generic Phish 2016-09-08 rev 7 2024-04-13