Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING iCloud Phishing Landing 2016-09-02 rev 4 2024-03-07
suricata ET PHISHING Successful Chase Phish M3 2016-08-26 rev 4 2024-03-07
suricata ET MALWARE Possible Tunna Proxy Closing Connection rev 3 2024-03-07
suricata ET MOBILE_MALWARE Android JadeRAT CnC Beacon rev 3 2024-03-07
suricata ET USER_AGENTS SideStep User-Agent rev 33 2024-03-07
suricata ET PHISHING Navy Federal Credit Union Phishing Landing 2016-01-30 rev 4 2024-03-07
suricata ET MALWARE x0Proto File Info Request rev 2 2024-03-07
suricata ET MALWARE Steganographic Encoded WAV File Inbound via HTTP M1 rev 3 2024-03-07
suricata ET PHISHING Successful Phish Fake Document Loading Error 2015-07-27 rev 7 2024-03-07
suricata ET WEB_CLIENT Tech Support Phone Scam Landing M2 2016-08-12 rev 4 2024-03-07
suricata ET MALWARE Koobface Checkin via POST rev 13 2024-03-07
suricata ET PHISHING Possible Linkedin Phishing Domain Dec 09 2016 rev 5 2024-03-07
suricata ET PHISHING Successful Paxful Cryptocurrency Wallet Phish Aug 30 2017 rev 4 2024-03-07
suricata ET MALWARE Possible CryptXXX Ransomware Renaming Encrypted File SMB v2 rev 3 2024-03-07
suricata ET ATTACK_RESPONSE Windows SCM DLL Hijack Command Inbound via HTTP M2 rev 4 2024-03-07
suricata ET PHISHING Possible Successful Apple Phishing Domain Feb 02 2017 rev 5 2024-03-07
suricata ET VOIP Possible Misuse Call from MERA RTU rev 2 2024-03-07
suricata ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-2017-12617 JSP Upload Bypass Attempt rev 7 2024-03-07
suricata ET WEB_SPECIFIC_APPS Magento Shoplift Exploit Inbound rev 4 2024-03-07
suricata ET EXPLOIT Pwdump4 Session Established GetHash port 445 rev 5 2024-03-07
suricata ET PHISHING France Ministry of Action and Public Accounts Phish Landing rev 3 2024-03-07
suricata ET MALWARE ELF/Emptiness v2 XOR HTTP Flood Command Inbound rev 2 2024-03-07
suricata ET WEB_CLIENT Possible Injected JS Form Stealer Checking Page Contents M1 rev 4 2024-03-07
suricata ET PHISHING Observed Possible Phishing Landing Page 2021-06-25 rev 3 2024-03-07
suricata ET PHISHING Possible Successful Generic Paypal Phish Jan 23 2016 rev 4 2024-03-07
suricata ET WEB_SPECIFIC_APPS Netgear WNR2000v5 Possible Serial Number Leak rev 4 2024-03-07
suricata ET ADWARE_PUP E2give Related Downloading Code rev 12 2024-03-07
suricata ET PHISHING Generic Custom Logo Phishing Landing 2021-03-10 rev 3 2024-03-07
suricata ET MALWARE BlackTech Plead Encrypted Payload Inbound rev 5 2024-03-07
suricata ET PHISHING Successful Chase Phish 2016-09-02 rev 4 2024-03-07
suricata ET ADWARE_PUP Websearch.com Spyware rev 13 2024-03-07
suricata ET EXPLOIT Serialized Spring Java Object Generated by ysoserial rev 2 2024-03-07
suricata ET PHISHING Paypal Phishing Redirect M1 Feb 24 2017 rev 5 2024-03-07
suricata ET INFO Generic 302 Redirect to Google rev 4 2024-03-07
suricata ET EXPLOIT Remote Command Execution via Android Debug Bridge rev 2 2024-03-07
suricata ET PHISHING IRS Phishing Landing 2016-01-15 rev 6 2024-03-07
suricata ET PHISHING Possible Successful Paypal Phishing Domain Feb 02 2017 rev 5 2024-03-07
suricata ET PHISHING Possible Phishing Landing via Moonfruit M2 2016-10-03 rev 4 2024-03-07
suricata ET PHISHING Possible Successful Linkedin Phishing Domain Feb 02 2017 rev 5 2024-03-07
suricata ET PHISHING Successful Google Drive Phish 2016-08-18 rev 5 2024-03-07