Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET MALWARE MICROPSIA HTTP Failover Response M1 rev 5 2024-04-13
suricata ET HUNTING Possible Malicious Document Request to .tk domain rev 4 2024-04-13
suricata ET PHISHING Successful Linkedin Phish 2016-12-09 rev 7 2024-04-13
suricata ET PHISHING Successful Microsoft Account Phish 2019-01-29 rev 3 2024-04-13
suricata ET PHISHING Successful Ebay Phish 2016-12-12 rev 7 2024-04-13
suricata ET MALWARE WSHRAT Credential Dump Module Download Command Inbound rev 4 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 6 2024-04-13
suricata ET INFO Android Adups Firmware DNS Query 5 rev 6 2024-04-13
suricata ET MALWARE APT28 Zebrocy/Zekapab Reporting to CnC M3 rev 3 2024-04-13
suricata ET PHISHING Successful Bank of America Phish 2015-11-21 rev 6 2024-04-13
suricata ET EXPLOIT Possible ZTE ZXV10 H108L Router Root RCE Attempt rev 4 2024-04-13
suricata ET PHISHING Successful AOL Phish 2016-10-24 rev 7 2024-04-13
suricata ET PHISHING Successful Personalized DHL Phish 2016-10-20 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-10-23 rev 7 2024-04-13
suricata ET PHISHING Successful Apple Phish M1 2015-12-02 rev 7 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish M1 2016-11-18 rev 7 2024-04-13
suricata ET MALWARE Sharik/Smoke Fake 404 Response with Payload Location rev 4 2024-04-13
suricata ET PHISHING Successful Synchronize Email Account Phish 2016-06-15 rev 7 2024-04-13
suricata ET ADWARE_PUP Win32/SWInformer.B Checkin rev 9 2024-04-13
suricata ET PHISHING Successful Bank of America Phish M1 2016-08-31 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 2016-10-05 rev 5 2024-04-13
suricata ET PHISHING Successful Ameli.fr Phish M2 Oct 26 2016-10-26 rev 6 2024-04-13
suricata ET PHISHING Successful PHOEN!X Apple Phish M2 2015-12-29 rev 6 2024-04-13
suricata ET EXPLOIT FCM-MB40 Attempted Remote Command Execution as Root rev 4 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish M2 2015-11-21 rev 7 2024-04-13
suricata ET PHISHING Possible Successful Google Drive Phish 2015-07-28 rev 6 2024-04-13
suricata ET PHISHING Successful Hotmail Phish 2016-07-14 rev 5 2024-04-13
suricata ET PHISHING Successful Gmail Phish M1 2016-10-12 rev 7 2024-04-13
suricata ET WEB_SERVER Binget PHP Library User Agent Inbound rev 5 2024-04-13
suricata ET PHISHING Successful Navy Federal Credit Union Phish 2016-02-01 rev 7 2024-04-13
suricata ET PHISHING Successful Generic Banking Phish 2016-10-28 rev 8 2024-04-13
suricata ET PHISHING Successful Bank of America Phish M2 2016-08-31 rev 7 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup check-fix.com rev 7 2024-04-13
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Femas.b Apps List Exfil rev 6 2024-04-13
suricata ET PHISHING Successful iTunes Connect Phish M2 2016-12-13 rev 7 2024-04-13
suricata ET PHISHING Successful Adobe Shared Document Phish 2016-08-19 rev 8 2024-04-13
suricata ET MALWARE ELF.SystemdMiner C2 Domain in DNS Lookup rev 5 2024-04-13
suricata ET MALWARE EXE Download When Server Claims To Send Audio File - Must Be Win32 rev 12 2024-04-13
suricata ET PHISHING Successful Comcast Phish 2016-08-18 rev 7 2024-04-13