Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Excel Phish 2016-11-17 rev 8 2024-04-13
suricata ET PHISHING Successful National Bank Phish Mar 13 2017 rev 5 2024-04-13
suricata ET PHISHING Successful US Bank Phish M1 2015-12-22 rev 7 2024-04-13
suricata ET PHISHING Generic Personalized Google Firebase Hosted Phishing Landing rev 3 2024-04-13
suricata ET PHISHING Successful Wildblue Phishing M1 2015-11-24 rev 7 2024-04-13
suricata ET PHISHING Successful Amazon Phish M2 2016-10-05 rev 6 2024-04-13
suricata ET PHISHING Successful Gmail Account Update Phish 2016-05-10 rev 7 2024-04-13
suricata ET PHISHING Successful Impots.gouv.fr Phish M1 2015-08-21 rev 7 2024-04-13
suricata ET MALWARE Gamaredon CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET PHISHING Successful Banco do Brasil Phish M3 Sep 29 2017 rev 4 2024-04-13
suricata ET HUNTING Suspicious HTTP POST Only Containing Pass - Possible Phishing rev 3 2024-04-13
suricata ET INFO IncrediMail Install Callback rev 6 2024-04-13
suricata ET PHISHING Successful SeniorPeopleMeet Phish M2 2016-09-14 rev 5 2024-04-13
suricata ET PHISHING Generic Personalized Google Firebase Hosted Phishing Landing rev 3 2024-04-13
suricata ET PHISHING Successful Chase Phish M4 2016-08-26 rev 5 2024-04-13
suricata ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server rev 3 2024-04-13
suricata ET PHISHING Successful Generic Webmail Account Phish 2016-07-15 rev 5 2024-04-13
suricata ET MALWARE MICROPSIA HTTP Failover Response M1 rev 5 2024-04-13
suricata ET PHISHING Successful Canada Revenue Agency Phish 2016-08-30 rev 6 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 5 rev 6 2024-04-13
suricata ET MALWARE CryptON/Nemesis/X3M Ransomware Onion Domain rev 6 2024-04-13
suricata ET EXPLOIT Netgear WNDR Router DNS Change POST Request rev 7 2024-04-13
suricata ET MALWARE APT28 Zebrocy/Zekapab Reporting to CnC M3 rev 3 2024-04-13
suricata ET MALWARE APT32 Komprogo DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Chase Phish 2016-10-31 rev 7 2024-04-13
suricata ET PHISHING Successful Microsoft Account Phish 2019-01-29 rev 3 2024-04-13
suricata ET PHISHING Successful Bank of America Phish 2015-11-21 rev 6 2024-04-13
suricata ET MALWARE Win32/Comisproc Checkin rev 11 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13
suricata ET MALWARE Java Archive sent when remote host claims to send an image rev 7 2024-04-13
suricata ET PHISHING Successful Apple Phish Oct 31 2016 rev 7 2024-04-13
suricata ET SCAN Grabber.py Web Scan Detected rev 9 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup symanttec.org rev 7 2024-04-13
suricata ET PHISHING Successful HM Revenue & Customs Phish M1 Apr 07 2017 rev 6 2024-04-13
suricata ET PHISHING Successful Apple Phish 2016-10-05 rev 7 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 1 rev 6 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-09-27 rev 7 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 24 rev 6 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-12-22 rev 7 2024-04-13
suricata ET INFO Peach C++ Library User Agent Outbound rev 7 2024-04-13