Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Scarlet Mimic DNS Lookup 24 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-10-23 rev 7 2024-04-13
suricata ET PHISHING L33bo Phishing Kit - Successful Credential Phish M1 2016-03-29 rev 6 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 25 rev 6 2024-04-13
suricata ET SCAN Apache mod_proxy Reverse Proxy Exposure 1 rev 5 2024-04-13
suricata ET MALWARE Arkei Stealer IP Lookup rev 5 2024-04-13
suricata ET MALWARE CustomRAT DNS lookup rev 6 2024-04-13
suricata ET EXPLOIT Possible WebShell JPEG Upload rev 3 2024-04-13
suricata ET SCAN DavTest WebDav Vulnerability Scanner Default User Agent Detected rev 7 2024-04-13
suricata ET MALWARE APT28 Zebrocy/Zekapab Reporting to CnC M3 rev 3 2024-04-13
suricata ET PHISHING Successful Bank of America Phish 2015-11-21 rev 6 2024-04-13
suricata ET EXPLOIT Possible ZTE ZXV10 H108L Router Root RCE Attempt rev 4 2024-04-13
suricata ET PHISHING Successful AOL Phish 2016-10-24 rev 7 2024-04-13
suricata ET PHISHING Successful AOL Phish M3 2016-07-14 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-10-23 rev 7 2024-04-13
suricata ET PHISHING Successful Hotmail Phish 2016-07-14 rev 5 2024-04-13
suricata ET PHISHING Successful Navy Federal Credit Union Phish 2016-02-01 rev 7 2024-04-13
suricata ET PHISHING Successful Generic Banking Phish 2016-10-28 rev 8 2024-04-13
suricata ET MALWARE Observed DNS Query to Known Fenrir Ransomware CnC Domain rev 6 2024-04-13
suricata ET PHISHING Successful Bank of America Phish M2 2016-08-31 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 2016-10-06 rev 8 2024-04-13
suricata ET MALWARE CryptON/Nemesis/X3M Ransomware Onion Domain rev 6 2024-04-13
suricata ET MALWARE WSHRAT CnC Checkin rev 3 2024-04-13
suricata ET PHISHING Successful View Invoice Phish M2 2016-10-05 rev 7 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish 2016-10-05 rev 7 2024-04-13
suricata ET PHISHING Successful Dropbox Phish 2015-11-04 rev 7 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup check-fix.com rev 7 2024-04-13
suricata ET MALWARE GoldenSpy CnC Activity rev 4 2024-04-13
suricata ET MALWARE APT28 Zebrocy/Zekapab POST Template Structure rev 4 2024-04-13
suricata ET USER_AGENTS EmailSiphon Suspicious User-Agent Inbound rev 5 2024-04-13
suricata ET PHISHING Possible Successful Phish - Generic Form Names 2016-09-16 rev 6 2024-04-13
suricata ET PHISHING Successful Mailbox Renew Phish 2015-08-14 rev 6 2024-04-13
suricata ET ADWARE_PUP SilverSpeedup Generic PUA Software UA rev 3 2024-04-13
suricata ET MALWARE ICEFOG-P Variant CnC Checkin M1 rev 3 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 7 rev 6 2024-04-13
suricata ET PHISHING Successful UK Tax Phishing M2 2016-02-01 rev 6 2024-04-13
suricata ET PHISHING Successful Microsoft Live Email Account Phish 2016-11-29 rev 7 2024-04-13
suricata ET MALWARE Zhelatin npopup Update Detected rev 7 2024-04-13
suricata ET WEB_SERVER Binget PHP Library User Agent Inbound rev 5 2024-04-13
suricata ET PHISHING Successful Gmail Phish M1 2016-10-12 rev 7 2024-04-13