Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Paypal Account Phish 2015-10-30 2 rev 5 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup scanmalware.info rev 7 2024-04-13
suricata ET PHISHING Successful Wildblue Phishing M2 2015-11-24 rev 7 2024-04-13
suricata ET MALWARE W32/Kbot.Backdoor Variant CnC Beacon rev 6 2024-04-13
suricata ET MALWARE Likely CryptoWall 2.0 .onion Proxy domain lookup rev 5 2024-04-13
suricata ET DNS DNS Query for vpnoverdns - indicates DNS tunnelling rev 7 2024-04-13
suricata ET MALWARE W32.Razy Inject Domain in DNS Lookup rev 5 2024-04-13
suricata ET PHISHING Successful Apple Phish M1 2016-09-14 rev 6 2024-04-13
suricata ET MALWARE XCodeGhost DNS Lookup rev 6 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 13 rev 6 2024-04-13
suricata ET PHISHING Successful Excel Phish 2016-09-26 rev 5 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2016-10-06 rev 7 2024-04-13
suricata ET PHISHING Successful USAA Phish 2016-11-22 rev 8 2024-04-13
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Femas.b DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful RBC Royal Bank Phish Jan 30 2017 rev 6 2024-04-13
suricata ET PHISHING Successful Tradekey Phish 2015-11-19 rev 7 2024-04-13
suricata ET MALWARE Possible Winnti-related DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful FR Carte Bleue / BCP Phish 2016-09-06 rev 6 2024-04-13
suricata ET PHISHING Successful HM Revenue & Customs Phish M2 Apr 07 2017 rev 5 2024-04-13
suricata ET MALWARE ELF.SystemdMiner C2 Domain in DNS Lookup rev 5 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup adobeincorp.com rev 7 2024-04-13
suricata ET MALWARE ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET HUNTING Suspicious HTTP Referer C Drive Path rev 7 2024-04-13
suricata ET MALWARE CenterPOS CnC rev 5 2024-04-13
suricata ET PHISHING Successful Excel Online Phish 2015-12-08 rev 9 2024-04-13
suricata ET MALWARE Possible Winnti-related DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Generic Mailbox Phish 2019-03-07 rev 3 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-11-18 rev 7 2024-04-13
suricata ET PHISHING Suspicious Fake Login - Possible Phishing - 2018-12-31 rev 4 2024-04-13
suricata ET PHISHING Successful Chase Phish 2015-09-24 rev 7 2024-04-13
suricata ET USER_AGENTS Tear Application User-Agent Detected rev 10 2024-04-13
suricata ET MALWARE ProjectSauron Remsec/HTTPBrowser/Pisloader Covert DNS CnC Channel TXT Lookup rev 10 2024-04-13
suricata ET MALWARE BazaBackdoor Variant CnC Activity M4 rev 3 2024-04-13
suricata ET PHISHING Possible Successful Credential Phish Oct 1 2015 rev 8 2024-04-13
suricata ET MALWARE OSX/WireLurker DNS Query Domain manhuaba.com.cn rev 6 2024-04-13
suricata ET ADWARE_PUP APN/Ask Toolbar PUA/PUP User-Agent rev 6 2024-04-13
suricata ET MALWARE DarkGate CnC Requesting Data Exfiltration from Bot rev 6 2024-04-13
suricata ET EXPLOIT Possible Linksys WAP54Gv3 Remote Debug Root Shell Exploitation Attempt rev 4 2024-04-13
suricata ET PHISHING Successful Facebook Phish M1 2016-09-30 rev 5 2024-04-13
suricata ET PHISHING Successful Telstra Refund Phish 2016-12-13 rev 7 2024-04-13