Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE APT28 Zebrocy/Zekapab CnC Checkin rev 4 2024-04-13
suricata ET ADWARE_PUP Win32/SWInformer.B Checkin rev 9 2024-04-13
suricata ET PHISHING Successful US Bank Phish M1 2015-12-22 rev 7 2024-04-13
suricata ET PHISHING Possible Successful Google Drive Phish 2015-07-28 rev 6 2024-04-13
suricata ET MALWARE Peppy/KeeOIL Google Connectivity Check rev 4 2024-04-13
suricata ET MALWARE Yandexbot Request Outbound rev 5 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-01-12 rev 7 2024-04-13
suricata ET PHISHING Successful Gmail Phish M1 2016-10-12 rev 7 2024-04-13
suricata ET WEB_SERVER Binget PHP Library User Agent Inbound rev 5 2024-04-13
suricata ET MALWARE Sharik/Smoke Fake 404 Response with Payload Location rev 4 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup symanttec.org rev 7 2024-04-13
suricata ET MALWARE Win32.Fareit.A/Pony Downloader Checkin rev 8 2024-04-13
suricata ET PHISHING Successful HM Revenue & Customs Phish M1 Apr 07 2017 rev 6 2024-04-13
suricata ET PHISHING Successful Apple Phish M1 2015-12-02 rev 7 2024-04-13
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Femas.b Apps List Exfil rev 6 2024-04-13
suricata ET PHISHING Facebook Phishing Domain in DNS Lookup rev 4 2024-04-13
suricata ET SCAN NYU Internet Census UA Inbound rev 4 2024-04-13
suricata ET EXPLOIT Hootoo TripMate Attempted Remote Command Injection Outbound rev 4 2024-04-13
suricata ET PHISHING Successful US Bank Phish 2016-06-09 M2 rev 5 2024-04-13
suricata ET PHISHING Successful Personalized Phish 2016-09-14 rev 6 2024-04-13
suricata ET PHISHING Successful Gmail Phish 2015-11-05 rev 8 2024-04-13
suricata ET PHISHING Successful Adobe Phish 2015-08-31 rev 6 2024-04-13
suricata ET INFO Android Adups Firmware DNS Query 5 rev 6 2024-04-13
suricata ET MALWARE Playtech Downloader Online Gaming Checkin rev 12 2024-04-13
suricata ET PHISHING Successful Blockchain Account Phish Aug 19 2016 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Account Phish Oct 30 rev 5 2024-04-13
suricata ET MALWARE APT32 Komprogo DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Banco de la Nacion Phish 2016-10-18 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish Mar 14 2017 rev 5 2024-04-13
suricata ET PHISHING Successful NAB Bank Phish M2 2016-10-19 rev 7 2024-04-13
suricata ET PHISHING Successful Tata Communications Phish 2016-08-19 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-12-24 M1 rev 5 2024-04-13
suricata ET MALWARE OSX/Mughthesec/SafeFinder/OperatorMac Rogue Search Engine DNS Query Observed rev 7 2024-04-13
suricata ET INFO External IP Address Lookup via vtransmit .com rev 5 2024-04-13
suricata ET SCAN PHP Attack Tool Morfeus F Scanner rev 17 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup adawareblock.com rev 7 2024-04-13
suricata ET USER_AGENTS Suspicious User-Agent Possible Trojan Downloader Shell rev 13 2024-04-13
suricata ET MALWARE Possible Rar'd Malware sent when remote host claims to send an Image rev 10 2024-04-13
suricata ET PHISHING Successful Webmail Account Upgrade Phish 2016-07-15 rev 7 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13