Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Netflix Phish 2016-10-12 rev 7 2024-04-13
suricata ET PHISHING Generic Personalized Google Firebase Hosted Phishing Landing rev 3 2024-04-13
suricata ET MALWARE Glupteba CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 25 rev 6 2024-04-13
suricata ET PHISHING Generic Personalized Google Firebase Hosted Phishing Landing rev 3 2024-04-13
suricata ET WEB_CLIENT Great Cannon DDoS JS M3 rev 5 2024-04-13
suricata ET PHISHING Successful National Australia Bank 2016-09-28 rev 7 2024-04-13
suricata ET EXPLOIT Possible Tor/Noscript JS Bypass rev 4 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 1 rev 6 2024-04-13
suricata ET PHISHING Successful Google Docs Phish 2015-12-09 rev 6 2024-04-13
suricata ET MALWARE BlackTech ELF/TSCookie CnC Observed in DNS Query rev 3 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2019-04-26 rev 4 2024-04-13
suricata ET PHISHING Successful Chase Phish 2016-10-31 rev 7 2024-04-13
suricata ET MALWARE CryptON/Nemesis/X3M Ransomware Onion Domain rev 6 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 6 rev 6 2024-04-13
suricata ET PHISHING Successful Apple Phish M1 2016-02-23 rev 8 2024-04-13
suricata ET PHISHING Successful Synchronize Email Account Phish 2016-06-15 rev 7 2024-04-13
suricata ET MALWARE Gamaredon CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET DOS Bittorrent User-Agent inbound - possible DDOS rev 5 2024-04-13
suricata ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server rev 3 2024-04-13
suricata ET MALWARE XPSecurityCenter FakeAV Checkin rev 7 2024-04-13
suricata ET MALWARE Win32/Comisproc Checkin rev 11 2024-04-13
suricata ET PHISHING Successful DHL Phish 2016-08-11 rev 7 2024-04-13
suricata ET PHISHING Successful Email Settings Error Phish 2016-11-17 rev 7 2024-04-13
suricata ET MALWARE Zhelatin npopup Update Detected rev 7 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET PHISHING Successful Microsoft Account Phish 2019-11-06 rev 3 2024-04-13
suricata ET PHISHING Successful Outlook Phish 2015-08-18 rev 8 2024-04-13
suricata ET PHISHING Successful Apple Phish M2 2015-12-02 rev 8 2024-04-13
suricata ET USER_AGENTS Microsoft Device Metadata Retrieval Client User-Agent rev 5 2024-04-13
suricata ET PHISHING Successful Paypal Phish M3 2016-10-05 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 2016-09-29 rev 7 2024-04-13
suricata ET PHISHING Successful Hotmail Phish 2016-09-29 rev 7 2024-04-13
suricata ET MALWARE MSIL/KeyRedirEx Banker Receiving Exit Instruction rev 6 2024-04-13
suricata ET MALWARE Backdoor.Darpapox/Jaku Initial C2 Checkin rev 5 2024-04-13
suricata ET ADWARE_PUP Hex Encoded IP HTTP Request - Likely Malware rev 8 2024-04-13
suricata ET MALWARE Silent Miner Changelog Checkin rev 5 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 Sep 15 2017 rev 4 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish M1 2016-11-18 rev 7 2024-04-13