Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful US Bank Phish 2016-09-20 rev 4 2024-03-07
suricata ET MOBILE_MALWARE Android/TrojanDropper.Agent.EP HTTP Host rev 4 2024-03-07
suricata ET EXPLOIT Serialized Java Object Calling Common Collection Function rev 2 2024-03-07
suricata ET PHISHING Possible Phishing Landing via MoonFruit.com M3 2016-01-22 rev 5 2024-03-07
suricata ET PHISHING INTERAC Payment Multibank Phishing Landing Mar 14 2017 rev 4 2024-03-07
suricata ET EXPLOIT D-Link DCS-930L Remote Command Execution attempt rev 4 2024-03-07
suricata ET MALWARE ELF/Mirai Variant CnC Activity rev 2 2024-03-07
suricata ET MALWARE Unknown VBScript Loader with Encoded PowerShell Execution Inbound rev 5 2024-03-07
suricata ET PHISHING Successful Bank of America Phish M2 2016-10-10 rev 4 2024-03-07
suricata ET PHISHING Possible Cartasi Phishing Domain Nov 08 2016 rev 6 2024-03-07
suricata ET PHISHING Successful NatWest Bank Phish M3 2016-10-19 rev 7 2024-03-07
suricata ET PHISHING Possible Linkedin Phishing Domain Dec 09 2016 rev 5 2024-03-07
suricata ET PHISHING Possible Successful Generic Paypal Phish Jan 23 2016 rev 4 2024-03-07
suricata ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-2017-12617 JSP Upload Bypass Attempt rev 7 2024-03-07
suricata ET INFO Request for Jsecoin Browser Miner M2 rev 4 2024-03-07
suricata ET EXPLOIT Pwdump4 Session Established GetHash port 445 rev 5 2024-03-07
suricata ET INFO HTTP Request to a *.co.be domain rev 7 2024-03-07
suricata ET PHISHING Suspicious Compound Refresh - Possible Phishing Redirect 2016-06-09 rev 6 2024-03-07
suricata ET PHISHING Possible Successful Apple Phishing Domain Feb 02 2017 rev 5 2024-03-07
suricata ET EXPLOIT Serialized Spring Java Object Generated by ysoserial rev 2 2024-03-07
suricata ET MALWARE Possible APT 41 Fake Server Response rev 3 2024-03-07
suricata ET PHISHING Mailbox Deactivation Phishing Landing 2016-12-15 rev 4 2024-03-07
suricata ET WEB_SPECIFIC_APPS Magento Shoplift Exploit Inbound rev 4 2024-03-07
suricata ET EXPLOIT Remote Command Execution via Android Debug Bridge rev 2 2024-03-07
suricata ET PHISHING Successful Google Drive Phish Sept 1 M2 2015-09-02 rev 6 2024-03-07
suricata ET PHISHING Possible Phishing Redirect Dec 13 2016 rev 6 2024-03-07
suricata ET EXPLOIT CVE-2016-0189 Exploit HFS Actor rev 4 2024-03-07
suricata ET INFO Proxy TRACE Request - inbound rev 13 2024-03-07
suricata ET PHISHING Navy Federal Credit Union Phishing Landing 2016-01-30 rev 4 2024-03-07
suricata ET EXPLOIT Possible ECLIPSEDWING RPCTOUCH MS08-067 rev 4 2024-03-07
suricata ET PHISHING Possible Phishing Blockchain title over non SSL Jul 10 2017 rev 4 2024-03-07
suricata ET PHISHING Possible Successful Bank of America Phishing Domain Feb 02 2017 rev 5 2024-03-07
suricata ET MALWARE Towerweb Ransomware Landing Page rev 5 2024-03-07
suricata ET PHISHING Generic Webmail Phishing Landing rev 3 2024-03-07
suricata ET PHISHING Webmail Validator Phishing Landing 2016-09-02 rev 4 2024-03-07
suricata ET MALWARE PurpleFox EK Landing Page Domain in SNI rev 2 2024-03-07
suricata ET PHISHING Possible USAA Phishing Domain Mar 14 2016 rev 7 2024-03-07
suricata ET PHISHING Successful Xoom Phishing 2015-11-24 rev 6 2024-03-07
suricata ET MALWARE Observed StrongPity CnC Domain in TLS SNI rev 2 2024-03-07
suricata ET PHISHING Successful Team IPwned Phish 2016-08-24 rev 5 2024-03-07