Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE W32/Zemra.DDoS.Bot Variant CnC Beacon rev 5 2024-04-12
suricata ET MALWARE W32/DownloaderAgent.fajk Second Stage Download List Requested rev 5 2024-04-12
suricata ET MALWARE Anchor_DNS Trickbot DNS CnC Command - Receive Data rev 3 2024-04-12
suricata ET PHISHING Possible MyMonero Phishing Landing - SSL/TLS Certificate Observed rev 3 2024-04-12
suricata ET SCAN Possible Scanning for Vulnerable JBoss rev 4 2024-04-12
suricata ET PHISHING Possible Successful Remax Phish - AOL Creds Jun 23 2015 rev 7 2024-04-12
suricata ET EXPLOIT Possible Elasticsearch CVE-2015-1427 Exploit Campaign SSL Certificate rev 4 2024-04-12
suricata ET PHISHING Successful Dropbox Phish June 17 2015 rev 5 2024-04-12
suricata ET SCAN NETWORK Outgoing Masscan detected rev 7 2024-04-12
suricata ET MALWARE W32/Banload.VZS Banker POST CnC Beacon 2 rev 4 2024-04-12
suricata ET WEB_CLIENT Evil Redirector Sep 29 2015 rev 4 2024-04-12
suricata ET PHISHING Successful Bank of America Phish M1 Oct 01 2012 rev 6 2024-04-12
suricata ET MALWARE MINEBRIDGE CnC Request rev 3 2024-04-12
suricata ET MALWARE W32/Ke3chang.Snake.APT Campaign CnC Beacon rev 4 2024-04-12
suricata ET MALWARE SystemdMiner CnC Activity rev 3 2024-04-12
suricata ET MALWARE Trojan Related Lame Updater User-Agent rev 6 2024-04-12
suricata ET MALWARE [PTsecurity] Gozi/Ursnif Payload v12 rev 4 2024-04-12
suricata ET MALWARE Hiloti loader requesting payload URL rev 5 2024-04-12
suricata ET MALWARE Possible IndigoDrop/Cobalt Strike Download rev 3 2024-04-12
suricata ET MALWARE Win32/Nubjub.A HTTP Check-in rev 8 2024-04-12
suricata ET WEB_SERVER HTTPing Usage Inbound rev 5 2024-04-12
suricata ET PHISHING Ebay Phishing Landing 2018-02-07 rev 3 2024-04-12
suricata ET MALWARE Cryptowall .onion Proxy Domain rev 4 2024-04-12
suricata ET MALWARE W32/PointOfSales.Misc CnC Activity rev 5 2024-04-12
suricata ET INFO SUSPICIOUS UA starting with Mozilla/8 rev 7 2024-04-12
suricata ET PHISHING Successful Microsoft Office Phish 2020-02-26 rev 3 2024-04-12
suricata ET WEB_SERVER WebShell - ASPyder - File Create - POST Structure rev 5 2024-04-12
suricata ET PHISHING Possible MyEtherWallet Phishing Landing - SSL/TLS Certificate Observed rev 3 2024-04-12
suricata ET MALWARE Win32/Oliga Fake User Agent rev 7 2024-04-12
suricata ET MALWARE Vobfus Check-in rev 5 2024-04-12
suricata ET PHISHING Successful Colleagues Quarantined with COVID-19 Phish 2020-03-25 rev 3 2024-04-12
suricata ET MOBILE_MALWARE CoolReaper CnC Beacon 2 rev 5 2024-04-12
suricata ET MALWARE Carberp file download rev 6 2024-04-12
suricata ET MALWARE Possible UPSTYLE Command Attempt rev 1 2024-04-12
suricata ET MALWARE Win32.HLLW.Autoruner USA_Load UA rev 5 2024-04-12
suricata ET INFO iTunes User Agent rev 10 2024-04-12
suricata ET PHISHING Successful Phish Outlook Credentials Oct 01 2015 rev 6 2024-04-12
suricata ET MALWARE W32/SpeedingUpMyPC.Rootkit Install CnC Beacon rev 4 2024-04-12
suricata ET MALWARE Carberp CnC request POST /set/task.html rev 6 2024-04-12
suricata ET MALWARE W32/Ke3chang.MyWeb.APT Eourdegh Campaign CnC Beacon rev 4 2024-04-12