Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE TeslaCrypt/AlphaCrypt Variant .onion Proxy Domain rev 5 2024-04-13
suricata ET ADWARE_PUP W32/Amonetize.Downloader Executable Download Request rev 7 2024-04-13
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Femas.b DNS Lookup rev 6 2024-04-13
suricata ET MALWARE OSX/Shlayer CnC Landing M2 rev 4 2024-04-13
suricata ET PHISHING Successful Banco do Brasil Phish Mar 30 2017 rev 6 2024-04-13
suricata ET MALWARE Cayosin Botnet User-Agent Observed M1 rev 6 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2016-01-15 M3 rev 5 2024-04-13
suricata ET ADWARE_PUP AdWare.Win32.Sushi.au Checkin rev 9 2024-04-13
suricata ET PHISHING Successful UK Tax Phishing M2 2016-02-01 rev 6 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 7 rev 6 2024-04-13
suricata ET MALWARE ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET WEB_CLIENT Fake AV Phone Scam Landing Apr 4 rev 8 2024-04-13
suricata ET PHISHING Successful Email Settings Phish 2016-10-28 rev 6 2024-04-13
suricata ET MALWARE ICEFOG-P Variant CnC Checkin M1 rev 3 2024-04-13
suricata ET ADWARE_PUP SilverSpeedup Generic PUA Software UA rev 3 2024-04-13
suricata ET PHISHING Successful Paypal Phish M3 2016-10-06 rev 7 2024-04-13
suricata ET INFO Android.Plankton/Tonclank Successful Installation Device Information POST Message Body rev 7 2024-04-13
suricata ET MALWARE Possible Outbound WebShell JPEG rev 5 2024-04-13
suricata ET MALWARE Gamaredon CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET PHISHING Possible Successful Outlook Web App Phish 2016-12-28 rev 8 2024-04-13
suricata ET MALWARE Win32/Filecoder.STOP Variant Public Key Download rev 5 2024-04-13
suricata ET PHISHING Successful Facebook Payment Phish M1 2016-09-29 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 2016-11-29 rev 9 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-10-11 rev 5 2024-04-13
suricata ET PHISHING Successful Mailbox Renew Phish 2015-08-14 rev 6 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 23 rev 6 2024-04-13
suricata ET PHISHING Successful Google Docs Phish M1 2016-10-19 rev 7 2024-04-13
suricata ET PHISHING Successful Phish OWA Credentials 2016-08-16 rev 6 2024-04-13
suricata ET PHISHING L33bo Phishing Landing 2016-03-29 rev 7 2024-04-13
suricata ET ADWARE_PUP Loadmoney.A Checkin 6 rev 10 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 14 rev 6 2024-04-13
suricata ET PHISHING Successful Impots.gouv.fr Phish 2016-10-24 rev 7 2024-04-13
suricata ET MALWARE CDT Credphish/Netwire Campaign DNS Lookup rev 6 2024-04-13
suricata ET MALWARE Arkei Stealer IP Lookup rev 5 2024-04-13
suricata ET ADWARE_PUP Lowercase mozilla/2.0 User-Agent Likely Malware rev 10 2024-04-13
suricata ET PHISHING Successful WeTransfer Phish Oct 04 2016 rev 5 2024-04-13
suricata ET PHISHING Successful Yahoo Phish M1 2016-06-15 rev 9 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish 2016-10-06 rev 7 2024-04-13