Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful AOL Phish M1 2016-07-14 rev 6 2024-04-13
suricata ET MALWARE Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET PHISHING Successful Paypal Phish M3 2016-10-06 rev 7 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 26 rev 6 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2015-09-22 rev 8 2024-04-13
suricata ET MALWARE Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET EXPLOIT Online Scheduling System 1.0 - Authentication Bypass Attempt rev 4 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET PHISHING Successful Gmail Phish 2016-08-18 rev 7 2024-04-13
suricata ET MALWARE APT28/SEDNIT Uploader Variant DNS Lookup rev 7 2024-04-13
suricata ET PHISHING Successful Docusign Phish 2016-11-17 rev 7 2024-04-13
suricata ET MALWARE Spora Ransomware DNS Query rev 6 2024-04-13
suricata ET WEB_CLIENT Fake AV Phone Scam Landing Apr 4 rev 8 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-10-11 rev 5 2024-04-13
suricata ET PHISHING Successful Excel Phish 2016-08-19 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2016-01-15 M3 rev 5 2024-04-13
suricata ET MALWARE ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M5 2016-12-13 rev 5 2024-04-13
suricata ET PHISHING Form Data Submitted to yolasite.com - Possible Phishing rev 5 2024-04-13
suricata ET ADWARE_PUP AdWare.MSIL.Solimba.b GET rev 7 2024-04-13
suricata ET ADWARE_PUP Lookup of Malware Domain twothousands.cm Likely Infection rev 7 2024-04-13
suricata ET PHISHING Successful LinkedIn Phish 2015-09-17 rev 7 2024-04-13
suricata ET MALWARE Glupteba CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET MALWARE Win32/Pift Checkin 1 rev 5 2024-04-13
suricata ET MALWARE Backdoor.Win32.PEx.942728546 Checkin rev 5 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET PHISHING Possible Successful *.myjino. ru Phish 2016-12-16 rev 10 2024-04-13
suricata ET INFO Python-urllib/ Suspicious User Agent rev 10 2024-04-13
suricata ET MALWARE Query to Known CnC Domain msnsolution.nicaze.net rev 9 2024-04-13
suricata ET MOBILE_MALWARE Apple iPhone Implant - Upload Files rev 3 2024-04-13
suricata ET MOBILE_MALWARE DNS Android/Spy.Feabme.A Query rev 6 2024-04-13
suricata ET GAMES Wolfteam HileYapak Server Response rev 6 2024-04-13
suricata ET MALWARE Ransomware Locky .onion Payment Domain rev 5 2024-04-13
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Femas.b DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2018-04-16 rev 4 2024-04-13
suricata ET MOBILE_MALWARE Apple iPhone Implant - Command Executed rev 3 2024-04-13
suricata ET PHISHING Successful Alibaba Phish 2016-12-20 rev 7 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 7 rev 6 2024-04-13
suricata ET PHISHING Successful Dubai Islamic Internet Bank Phish 2016-12-20 rev 7 2024-04-13
suricata ET PHISHING Successful Apple Account Phish Feb 17 2017 rev 5 2024-04-13