Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Observed Ttint Update CnC Domain in DNS Query rev 3 2020-11-19
suricata ET MALWARE Observed Ttint CnC Domain in DNS Query rev 3 2020-11-19
suricata ET MALWARE PowerGhost Staging CnC in DNS Query rev 3 2020-11-19
suricata ET INFO DNS Query for Suspicious .gdn Domain rev 5 2020-11-19
suricata ET MALWARE Win32.Glupteba/ClIEcker CnC Checkin rev 7 2020-11-19
suricata ET MALWARE PRG/wnspoem/Zeus InfoStealer Trojan Config Download rev 15 2020-11-19
suricata ET MALWARE PowerGhost Checkin CnC in DNS Query rev 2 2020-11-19
suricata ET MALWARE Observed Ttint CnC Domain in DNS Query rev 3 2020-11-19
suricata ET WEB_SPECIFIC_APPS Apache CouchDB Remote Code Execution 1 rev 4 2020-11-19
suricata ET DNS Query to a *.pw domain - Likely Hostile rev 8 2020-11-19
suricata ET PHISHING Bank of America Phishing Landing rev 3 2020-11-19
suricata ET INFO Pastebin-style Service nrecom in DNS Query rev 3 2020-11-19
suricata ET MALWARE Observed DonotGroup CnC in DNS Query rev 3 2020-11-19
suricata ET INFO Netviewer.com Remote Control Proxy Test rev 7 2020-11-19
suricata ET EXPLOIT Zollard PHP Exploit UA Outbound rev 6 2020-11-19
snort ET CURRENT_EVENTS Generic Personalized Google Firebase Hosted Phishing Landing rev 2 2020-11-18
snort ET CURRENT_EVENTS Generic Personalized Google Firebase Hosted Phishing Landing rev 2 2020-11-18
snort ET CURRENT_EVENTS Generic Personalized Google Firebase Hosted Phishing Landing rev 2 2020-11-18
snort ET TROJAN Observed DonotGroup CnC in DNS Query rev 2 2020-11-18
snort ET TROJAN Win32/Phorpiex Template 6 Active - Outbound Malicious Email Spam rev 2 2020-11-17
suricata ET PHISHING Possible Facebook Phishing Landing - Title over non SSL rev 4 2020-11-17
suricata ET INFO Suspicious Outbound SIG DNS Query rev 2 2020-11-17
suricata ET MALWARE DonotGroup Staging Domain in DNS Query rev 3 2020-11-17
suricata ET MALWARE DonotGroup Staging Domain in DNS Query rev 3 2020-11-17
suricata ET MALWARE Patchwork Staging Domain in DNS Query rev 3 2020-11-17
suricata ET PHISHING Possible Successful Generic Phish to .icu Domain 2019-02-06 rev 5 2020-11-17
suricata ET PHISHING Possible Successful Generic Phish to .gqn Domain 2018-10-23 rev 4 2020-11-17
suricata ET MALWARE Win32/Phorpiex Template 6 Active - Outbound Malicious Email Spam rev 1 2020-11-17
suricata ET PHISHING Possible Wells Fargo Phishing Landing - Title over non SSL rev 3 2020-11-17
suricata ET PHISHING Paypal Phishing Landing 2018-01-18 M1 rev 3 2020-11-17
suricata ET PHISHING Possible Dropbox Phishing Landing - Title over non SSL rev 4 2020-11-17
suricata ET PHISHING Possible Facebook Phishing Landing - Title over non SSL rev 4 2020-11-17
suricata ET MALWARE Magecart CnC Domain Observed in DNS Query rev 4 2020-11-17
suricata ET PHISHING Possible Successful Generic Phish to .cf Domain 2018-10-23 rev 4 2020-11-17
suricata ET INFO moanmyip .com DNS Lookup rev 2 2020-11-17
suricata ET INFO ipchicken .com DNS Lookup rev 2 2020-11-17
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-02 M4 rev 3 2020-11-17
suricata ET MALWARE DonotGroup Staging Domain in DNS Query rev 3 2020-11-17
suricata ET MALWARE Generic Downloader - HTTP POST rev 8 2020-11-17
suricata ET PHISHING Possible Facebook Phishing Landing - Title over non SSL rev 3 2020-11-17