Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Yobit Cryptocurrency Exchange Phish 2017-12-28 rev 4 2024-04-12
suricata ET EXPLOIT Netis E1+ 1.2.32533 - Unauthenticated WiFi Password Leak rev 3 2024-04-12
suricata ET EXPLOIT_KIT Possible Red Dot Exploit Kit Single Character JAR Request rev 4 2024-04-12
suricata ET MALWARE W32/24x7Help.ScareWare CnC Beacon rev 5 2024-04-12
suricata ET PHISHING Possible MyMonero Phishing Landing - SSL/TLS Certificate Observed rev 3 2024-04-12
suricata ET PHISHING Possible Compromised Wordpress - Generic Phishing Landing 2018-01-22 rev 3 2024-04-12
suricata ET SCAN Possible Scanning for Vulnerable JBoss rev 4 2024-04-12
suricata ET HUNTING Bit.do Shortened Link Request to EXE rev 3 2024-04-12
suricata ET MALWARE W32/Dexter Infostealer CnC POST rev 4 2024-04-12
suricata ET MALWARE Qtloader encrypted check-in Oct 19 M1 rev 4 2024-04-12
suricata ET PHISHING Possible Successful Remax Phish - AOL Creds Jun 23 2015 rev 7 2024-04-12
suricata ET MALWARE Hangover Campaign Keylogger 2 checkin rev 6 2024-04-12
suricata ET PHISHING GOV UK Possible COVID-19 Phish 2020-04-06 rev 3 2024-04-12
suricata ET WEB_SERVER PHP Crawler rev 4 2024-04-12
suricata ET WEB_SERVER HTTPing Usage Inbound rev 5 2024-04-12
suricata ET PHISHING Successful Microsoft Office Phish 2020-02-26 rev 3 2024-04-12
suricata ET MALWARE Possible IndigoDrop/Cobalt Strike Download rev 3 2024-04-12
suricata ET MALWARE Anchor_DNS Trickbot DNS CnC Command - Prepare to Receive Data rev 3 2024-04-12
suricata ET MALWARE Dridex/Bugat/Feodo Cookie rev 6 2024-04-12
suricata ET INFO SUSPICIOUS UA starting with Mozilla/7 rev 6 2024-04-12
suricata ET MALWARE Win32/Sisproc Variant POST to CnC Server rev 6 2024-04-12
suricata ET MALWARE Lyposit Ransomware Checkin 1 rev 9 2024-04-12
suricata ET PHISHING Successful World Health Organization COVID-19 Phish 2020-03-23 rev 4 2024-04-12
suricata ET WEB_SERVER WebShell - ASPyder - File Browser - POST Structure rev 4 2024-04-12
suricata ET HUNTING HTTP POST Form Submitted to Weebly Free Hosting rev 3 2024-04-12
suricata ET MALWARE General Win32 Backdoor Checkin POST rev 8 2024-04-12
suricata ET MALWARE W32/PointOfSales.Misc CnC Beacon rev 5 2024-04-12
suricata ET DOS LOIC POST rev 6 2024-04-12
suricata ET MALWARE Ponmocup Redirection from infected Website to Trojan-Downloader rev 12 2024-04-12
suricata ET MALWARE MINEBRIDGE CnC Response rev 3 2024-04-12
suricata ET SCAN NETWORK Incoming Masscan detected rev 7 2024-04-12
suricata ET PHISHING Possible Successful Yahoo Phish Jun 23 2015 rev 7 2024-04-12
suricata ET MALWARE W32/Ke3chang.MyWeb.APT Campaign CnC Beacon rev 4 2024-04-12
suricata ET SCAN JAWS Webserver Unauthenticated Shell Command Execution rev 3 2024-04-12
suricata ET MALWARE FakeAV oms.php Data Post rev 4 2024-04-12
suricata ET SCAN ZmEu exploit scanner rev 11 2024-04-12
suricata ET MOBILE_MALWARE Android Spyware Dowgin Checkin rev 4 2024-04-12
suricata ET MALWARE DecebalPOS User-Agent rev 5 2024-04-12
suricata ET INFO libwww-perl User-Agent rev 6 2024-04-12
suricata ET ADWARE_PUP Win32/Adware.Qjwmonkey.H Variant CnC Activity M2 rev 3 2024-04-12