Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Generic Credential Phish M1 2023-02-22 rev 2 2024-03-26
suricata ET MALWARE Observed BlackLotus SSL Certificate Observed rev 2 2024-03-26
suricata ET MALWARE TransparentTribe CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful Idaho Central Credit Union Credential Phish rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Rewardsteal.e CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE Sidewinder APT Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO dnsHome DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE 000Stealer CnC Checkin rev 2 2024-03-26
suricata ET INFO ffmuc DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Dridex CnC Request - Spam/Worm Component rev 2 2024-03-26
suricata ET MALWARE Win32/Trickbot Data Exfiltration M2 rev 3 2024-03-26
suricata ET GAMES Moonlight Hack Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Generic Credential Phish Landing Page M2 2022-10-11 rev 2 2024-03-26
suricata ET PHISHING TMOBILE Successful Credential Phish 2022-11-01 rev 2 2024-03-26
suricata ET MALWARE PhantomNet/Smanager Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Plan9-dns DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Spy.AndroidOS.SmsThief.ta CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE DarkCloud Stealer Key Logger Function Exfiltrating Data via Telegram rev 2 2024-03-26
suricata ET INFO Null31 DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE Prometei Botnet CnC DGA - xinchao Pattern rev 2 2024-03-26
suricata ET MALWARE Octopus Backdoor Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE DazzleSpy Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.GoatRat CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO Switch DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET PHISHING Successful RoundCube Phish 2022-07-18 rev 2 2024-03-26
suricata ET PHISHING Successful DHL Credential Phish M1 2022-06-09 rev 2 2024-03-26
suricata ET MALWARE Successful CargoBay Exfil rev 2 2024-03-26
suricata ET PHISHING Successful DHL Credential Phish M2 2022-06-09 rev 2 2024-03-26
suricata ET INFO NextDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE TrojanDownloader:Win32/Sinresby.B Checkin rev 2 2024-03-26
suricata ET PHISHING Successful Onedrive Credential Phish 2022-06-22 rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Spy Hermit CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET MALWARE OSX/SHLAYER CnC Domain in DNS Lookup rev 2 2024-03-26
suricata ET INFO FutaDNS DNS Over HTTPS Certificate Inbound rev 2 2024-03-26
suricata ET MALWARE ELF/AbcBot Requesting Commands from CnC rev 2 2024-03-26
suricata ET MALWARE Win32/SilentBreak Related Domain in DNS Lookup rev 2 2024-03-26
suricata ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup rev 2 2024-03-26