Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Tata Communications Phish 2016-08-19 rev 7 2024-04-13
suricata ET MALWARE APT32 Win32/Ratsnif Submitting Output of Command to CnC rev 4 2024-04-13
suricata ET MALWARE Observed CDC Ransomware User-Agent rev 4 2024-04-13
suricata ET MALWARE CustomRAT DNS lookup rev 6 2024-04-13
suricata ET PHISHING Successful NAB Bank Phish M2 2016-10-19 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish Mar 14 2017 rev 5 2024-04-13
suricata ET ADWARE_PUP Adware.Win32/SProtector.A Client Checkin rev 7 2024-04-13
suricata ET MALWARE APT32 Komprogo DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful National Bank Phish Mar 13 2017 rev 5 2024-04-13
suricata ET MALWARE Win32.Fareit.A/Pony Downloader Checkin rev 8 2024-04-13
suricata ET PHISHING Successful Banco de la Nacion Phish 2016-10-18 rev 6 2024-04-13
suricata ET MALWARE APT28 Zebrocy/Zekapab CnC Checkin rev 4 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 11 rev 6 2024-04-13
suricata ET USER_AGENTS Suspicious User-Agent Possible Trojan Downloader Shell rev 13 2024-04-13
suricata ET PHISHING Successful Ebay Phish M2 2016-12-29 rev 7 2024-04-13
suricata ET ADWARE_PUP BundledInstaller PUA/PUP Downloader rev 5 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET ADWARE_PUP Sogou Toolbar Checkin rev 10 2024-04-13
suricata ET MALWARE Glupteba CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2016-10-12 rev 7 2024-04-13
suricata ET MALWARE Possible Rar'd Malware sent when remote host claims to send an Image rev 10 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 2016-12-05 rev 7 2024-04-13
suricata ET SCAN PHP Attack Tool Morfeus F Scanner rev 17 2024-04-13
suricata ET EXPLOIT Possible Linksys E1500/E2500 apply.cgi RCE Attempt rev 4 2024-04-13
snort ET TROJAN Possible UPSTYLE Command Attempt rev 1 2024-04-12
snort ET TROJAN Possible UPSTYLE Payload Retrieval Attempt rev 1 2024-04-12
suricata ET MALWARE Soraya C2 User-Agent rev 5 2024-04-12
suricata ET MALWARE Win32/Oliga Fake User Agent rev 7 2024-04-12
suricata ET INFO JAR Size Under 30K Size - Potentially Hostile rev 9 2024-04-12
suricata ET MALWARE Windows Executable Downloaded With Image Content-Type Header rev 3 2024-04-12
suricata ET MALWARE W32/Neverquest.InfoStealer Configuration Request CnC Beacon rev 4 2024-04-12
suricata ET MALWARE W32/Ke3chang.MyWeb.APT Eourdegh Campaign CnC Beacon rev 4 2024-04-12
suricata ET MALWARE W32/PointOfSales.Misc CnC Activity rev 5 2024-04-12
suricata ET MALWARE W32/Echmark/MarkiRAT CnC Host Checkin rev 3 2024-04-12
suricata ET MALWARE Cryptowall .onion Proxy Domain rev 4 2024-04-12
suricata ET PHISHING Successful Craigslist Phish 2016-04-25 rev 4 2024-04-12
suricata ET MALWARE Sinowal/sinonet/mebroot/Torpig infected host POSTing process list rev 7 2024-04-12
suricata ET MALWARE OLDBAIT Checkin sptr rev 5 2024-04-12
suricata ET EXPLOIT_KIT g01pack exploit pack /mix/ payload rev 4 2024-04-12
suricata ET MALWARE W32/Syndicasec.Backdoor CnC Beacon rev 6 2024-04-12