Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Apache Struts inbound .getWriter OGNL injection remote code execution attempt rev 3 2024-03-07
suricata ET ADWARE_PUP Regnow.com Access rev 12 2024-03-07
suricata ET PHISHING 401TRG Successful Multi-Email Phish - Observed in Docusign/Dropbox/Onedrive/Gdrive Nov 02 2017 rev 4 2024-03-07
suricata ET PHISHING Possible Successful Cartasi Phishing Domain Feb 02 2017 rev 5 2024-03-07
suricata ET ADWARE_PUP BInet Information Upload rev 12 2024-03-07
suricata ET ADWARE_PUP Loadmoney.A Checkin 3 rev 7 2024-03-07
suricata ET MALWARE Possible Pipka JS Skimmer - Skimmer Payload Observed M4 rev 3 2024-03-07
suricata ET MALWARE Koobface Checkin via POST rev 13 2024-03-07
suricata ET PHISHING Account Update Phishing Landing 2016-09-06 rev 4 2024-03-07
suricata ET WEB_CLIENT Tech Support Phone Scam Landing M1 2016-08-12 rev 4 2024-03-07
suricata ET PHISHING Possible Successful Ebay Phishing Domain Feb 02 2017 rev 5 2024-03-07
suricata ET PHISHING Apple Phishing Landing M1 Sep 14 2017 rev 3 2024-03-07
suricata ET MALWARE MRCR1 Ransomware Checkin M2 rev 4 2024-03-07
suricata ET PHISHING Docusign Phishing Landing Mar 08 2017 rev 4 2024-03-07
suricata ET MOBILE_MALWARE Android Trojan Cloudsota HTTP Host rev 4 2024-03-07
suricata ET EXPLOIT Remote Command Execution via Android Debug Bridge 2 rev 2 2024-03-07
suricata ET WEB_CLIENT Microsoft Tech Support Scam M2 2016-09-15 rev 4 2024-03-07
suricata ET ADWARE_PUP yupsearch.com Spyware Install - protector.exe rev 11 2024-03-07
suricata ET HUNTING SUSPICIOUS Excel Add-in Download M1 rev 4 2024-03-07
suricata ET PHISHING Successful Adobe Shared Document Phish 2016-08-26 rev 5 2024-03-07
suricata ET MALWARE ELF/Emptiness v2 XOR Update Command Inbound rev 2 2024-03-07
suricata ET MALWARE Possible CryptXXX Ransomware Renaming Encrypted File SMB v2 rev 3 2024-03-07
suricata ET PHISHING Possible Successful Craigslist Phishing Domain Feb 07 2017 rev 5 2024-03-07
suricata ET PHISHING Outlook 365 Encrypted Email Phishing Landing M1 2016-08-31 rev 4 2024-03-07
suricata ET HUNTING Redirect to Joom AG Hosted Document - Potential Phishing rev 3 2024-03-07
suricata ET MALWARE NanoCore RAT CnC 27 rev 3 2024-03-07
suricata ET PHISHING Successful Webmail Account Upgrade Phish 2016-07-21 rev 6 2024-03-07
suricata ET PHISHING France Ministry of Action and Public Accounts Phish Landing rev 3 2024-03-07
suricata ET MALWARE Targeted Activity - CnC Domain in SNI rev 2 2024-03-07
suricata ET MALWARE Win32/Tofsee Unique Email Body Byte Sequence Observed rev 3 2024-03-07
suricata ET MALWARE Observed StrongPity CnC Domain in TLS SNI rev 2 2024-03-07
suricata ET PHISHING Successful Gmail Phish M1 2016-08-12 rev 4 2024-03-07
suricata ET PHISHING Successful Paypal Account Phish 2015-10-30 3 rev 4 2024-03-07
suricata ET ADWARE_PUP Tibsystems Spyware Download rev 12 2024-03-07
suricata ET MALWARE BabyShark CnC Domain in SNI rev 4 2024-03-07
suricata ET ADWARE_PUP E2give Related Downloading Code rev 12 2024-03-07
suricata ET P2P Morpheus Install rev 12 2024-03-07
suricata ET PHISHING Anonisma Phishing CSS 2015-12-29 rev 5 2024-03-07
suricata ET PHISHING Miniproxy Cloned Page - Possible Phishing Landing rev 4 2024-03-07
suricata ET PHISHING Successful Intuit Phish 2016-07-21 rev 5 2024-03-07