Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Wells Fargo Phish M1 2016-09-16 rev 6 2024-04-13
suricata ET PHISHING Successful HBL Bank Phish M1 2016-10-12 rev 8 2024-04-13
suricata ET MALWARE W32.Razy Inject Domain in DNS Lookup rev 5 2024-04-13
suricata ET SCAN DominoHunter Security Scan in Progress rev 5 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 15 rev 6 2024-04-13
suricata ET PHISHING Successful Dropbox Phish 2016-10-14 rev 7 2024-04-13
suricata ET PHISHING Successful ABSA Phish 2016-10-26 rev 6 2024-04-13
suricata ET PHISHING Successful Apple Phish M2 2016-09-14 rev 6 2024-04-13
suricata ET PHISHING Successful BB&T Bank Phish 2016-12-15 rev 8 2024-04-13
suricata ET MALWARE Stabuniq Checkin rev 6 2024-04-13
suricata ET MALWARE Critroni Variant .onion Proxy Domain rev 5 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish 2016-10-05 rev 7 2024-04-13
suricata ET PHISHING Possible Interac Phish Aug 18 2017 rev 4 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2016-12-09 rev 5 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 16 rev 6 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 13 rev 6 2024-04-13
suricata ET WEB_CLIENT Fake 404 With Hidden Login Form rev 5 2024-04-13
suricata ET PHISHING Successful Paypal Phish M3 2016-10-26 rev 8 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-12-08 M3 rev 7 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish M1 2015-11-21 rev 7 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup testsnetcontrol.com rev 7 2024-04-13
suricata ET PHISHING Successful Generic Phish - Phone Number 2015-09-02 rev 7 2024-04-13
suricata ET MALWARE Trojan.Win32.Antavmu.guw Checkin rev 7 2024-04-13
suricata ET USER_AGENTS Suspicious User-Agent VCTestClient rev 7 2024-04-13
suricata ET EXPLOIT Quanta LTE Router Information Disclosure Exploit Attempt rev 5 2024-04-13
suricata ET PHISHING Successful Alibaba Phish 2016-09-28 rev 6 2024-04-13
suricata ET PHISHING Successful Apple Store Phish M1 2016-12-29 rev 6 2024-04-13
suricata ET PHISHING Successful Yahoo Phish 2016-12-08 rev 7 2024-04-13
suricata ET PHISHING Successful Barclays Phish M2 2016-09-09 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 Sep 15 2017 rev 4 2024-04-13
suricata ET MALWARE Possible Winnti-related DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2016-09-09 rev 5 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13
suricata ET PHISHING Successful Apple Phish M1 2016-11-15 rev 5 2024-04-13
suricata ET MALWARE Critroni Variant .onion Proxy Domain rev 5 2024-04-13
suricata ET ADWARE_PUP SearchProtect PUA User-Agent Observed rev 5 2024-04-13
suricata ET MALWARE Pteranodon Variant 1 Backdoor Checkin rev 5 2024-04-13
suricata ET EXPLOIT HiSilicon DVR - Buffer Overflow in Builtin Web Server rev 5 2024-04-13
suricata ET MALWARE OSX/Proton.B DNS Lookup rev 7 2024-04-13