Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Gmail Phish 2016-08-18 rev 7 2024-04-13
suricata ET PHISHING Successful Chase Phish 2020-10-14 rev 3 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2015-09-04 rev 8 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2016-01-15 M3 rev 5 2024-04-13
suricata ET PHISHING Successful Alibaba Phish 2016-09-28 rev 6 2024-04-13
suricata ET PHISHING L33bo Phishing Kit - Successful Credential Phish M1 2016-03-29 rev 6 2024-04-13
suricata ET PHISHING Form Data Submitted to yolasite.com - Possible Phishing rev 5 2024-04-13
suricata ET MALWARE Ransomware Locky .onion Payment Domain rev 5 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET WEB_CLIENT Fake AV Phone Scam Landing Apr 4 rev 8 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 25 rev 6 2024-04-13
suricata ET PHISHING Successful Citizenbank Phish 2016-05-24 M1 rev 5 2024-04-13
suricata ET MALWARE Win32/Pift Checkin 1 rev 5 2024-04-13
suricata ET SCAN Apache mod_proxy Reverse Proxy Exposure 1 rev 5 2024-04-13
suricata ET MALWARE Arkei Stealer IP Lookup rev 5 2024-04-13
suricata ET EXPLOIT Possible WebShell JPEG Upload rev 3 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET MOBILE_MALWARE DNS Android/Spy.Feabme.A Query rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 2016-11-29 rev 8 2024-04-13
suricata ET PHISHING Successful Yahoo Phish 2016-12-08 rev 7 2024-04-13
suricata ET MALWARE ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 6 2024-04-13
suricata ET PHISHING Possible Successful Google Drive Phish M1 2015-07-28 rev 6 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 7 rev 6 2024-04-13
suricata ET PHISHING Successful Yahoo Phish 2016-10-27 rev 7 2024-04-13
suricata ET PHISHING Successful Dubai Islamic Internet Bank Phish 2016-12-20 rev 7 2024-04-13
suricata ET INFO External IP Lookup - iplocation .truevue .org rev 5 2024-04-13
suricata ET MALWARE xpsecuritycenter.com Fake AntiVirus GET-Install Checkin rev 8 2024-04-13
suricata ET PHISHING Successful Paypal Phish M5 2016-12-13 rev 5 2024-04-13
suricata ET PHISHING Successful DrSpam Phish 2016-06-08 M2 rev 5 2024-04-13
suricata ET PHISHING Successful FR Gmail Phish M2 2016-03-15 rev 7 2024-04-13
suricata ET PHISHING Successful AOL Phish M3 2016-07-14 rev 6 2024-04-13
suricata ET PHISHING Possible Successful Outlook Web App Phish 2016-12-28 rev 8 2024-04-13
suricata ET PHISHING Successful Yahoo Phish M1 2016-06-15 rev 9 2024-04-13
suricata ET INFO DNS request for Monero mining pool rev 7 2024-04-13
suricata ET MALWARE ABUSE.CH Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET PHISHING Successful US Bank Phish 2016-06-09 M1 rev 5 2024-04-13
suricata ET MALWARE Cayosin Botnet User-Agent Observed M1 rev 6 2024-04-13
suricata ET MALWARE Lazarus Decafett DNS Lookup 4 rev 6 2024-04-13
suricata ET MALWARE Possible Outbound WebShell JPEG rev 5 2024-04-13
suricata ET ADWARE_PUP W32/Amonetize.Downloader Executable Download Request rev 7 2024-04-13