Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-2017-12617 JSP Upload Bypass Attempt rev 7 2024-03-07
suricata ET MALWARE Qarallax RAT Downloading Modules rev 4 2024-03-07
suricata ET MALWARE Possible Pipka JS Skimmer - Skimmer Payload Observed M3 rev 3 2024-03-07
suricata ET P2P ed2k request part rev 12 2024-03-07
suricata ET EXPLOIT LG SuperSign EZ CMS 2.5 Remote Code Execution CVE-2018-17173 rev 3 2024-03-07
suricata ET PHISHING Shipping Document Phishing Landing 2016-06-23 rev 5 2024-03-07
suricata ET MALWARE Mirai pTea Variant - Bot Upload Command Outbound rev 2 2024-03-07
suricata ET ADWARE_PUP Zenotecnico Adware 2 rev 9 2024-03-07
suricata ET PHISHING Possible barclays .co. uk Phishing Domain 2016-06-22 rev 8 2024-03-07
suricata ET MALWARE Ranscam Ransomware Contact Form rev 4 2024-03-07
suricata ET EXPLOIT Pwdump4 Session Established GetHash port 139 rev 5 2024-03-07
suricata ET PHISHING Successful Earthlink Phish 2016-07-19 rev 6 2024-03-07
suricata ET MALWARE FastPOS Version Checkin rev 4 2024-03-07
suricata ET PHISHING DrSpam Phishing Landing 2016-06-08 rev 4 2024-03-07
suricata ET WEB_SERVER HTTP Request to a *.54dfa1cb.com domain - Anuna Checkin - Compromised PHP Site rev 6 2024-03-07
suricata ET CHAT ICQ Login rev 6 2024-03-07
suricata ET PHISHING Obfuscated Phishing Landing 2016-12-19 rev 5 2024-03-07
suricata ET MALWARE Alina Server Response Code rev 8 2024-03-07
suricata ET PHISHING Successful Paypal Phish 2016-08-30 rev 4 2024-03-07
suricata ET PHISHING Successful Yahoo Password Strength Phish M2 2016-08-24 rev 4 2024-03-07
suricata ET PHISHING Possible Successful Discover Phish Feb 02 2017 rev 6 2024-03-07
suricata ET PHISHING Successful Outlook Phish 2016-10-25 rev 4 2024-03-07
suricata ET PHISHING Adobe Shared Document Phishing Landing M2 2016-08-31 rev 4 2024-03-07
suricata ET PHISHING Successful Outlook Password Update Phish M3 2016-09-01 rev 4 2024-03-07
suricata ET MALWARE Observed Win32/Orion Logger SMTP Exfil Subject Line rev 2 2024-03-07
suricata ET PHISHING Successful Blocked Email Account Phish M2 2016-08-23 rev 4 2024-03-07
suricata ET EXPLOIT Possible Belkin N600DB Wireless Router Request Forgery Attempt rev 4 2024-03-07
suricata ET PHISHING Successful OWA Account Phish 2015-08-21 rev 5 2024-03-07
suricata ET INFO Dameware Remote Control Service Install rev 6 2024-03-07
suricata ET INFO localtunnel Sucessful Connection Setup rev 3 2024-03-07
suricata ET PHISHING Successful UPS Phish 2015-11-05 rev 6 2024-03-07
suricata ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing rev 5 2024-03-07
suricata ET MALWARE NanoCore RAT CnC 27 rev 3 2024-03-07
suricata ET MALWARE CenterPOS Load Plugins rev 4 2024-03-07
suricata ET PHISHING Am3Refh Obfuscated Phishing Landing 2016-02-23 rev 5 2024-03-07
suricata ET MALWARE PurpleFox EK Landing Page Domain in SNI rev 2 2024-03-07
suricata ET MALWARE Shamoon v3 64bit Propagating Internally via SMB rev 2 2024-03-07
suricata ET PHISHING Possible HMRC Phishing Domain 2016-06-08 rev 6 2024-03-07
suricata ET PHISHING Successful Chase Phish 2015-09-24 rev 5 2024-03-07
suricata ET PHISHING Successful Generic Webmail Phish 2016-10-21 rev 4 2024-03-07