Skip to content

Commit

Permalink
✨ Update facebook-pl-7d71c1c
Browse files Browse the repository at this point in the history
Remove old reference that was valid. However due to URLScan not being able to retrieve the DOM anymore it no longer 'matches' the rules from IOK's POV
  • Loading branch information
IlluminatiFish authored Oct 27, 2023
1 parent 93c6446 commit 634fbe5
Showing 1 changed file with 4 additions and 6 deletions.
10 changes: 4 additions & 6 deletions indicators/facebook-pl-7d71c1c.yml
Original file line number Diff line number Diff line change
@@ -1,22 +1,20 @@
title: Facebook Phishing Kit 7d71c1c
description: |
Detects a Facebook phishing kit targeting
Polish speaking users. Using the same login
form structure across all domains as well
as using the same name for the logo file.
Polish speaking users. Using the same Google
Tag ID across every domain deploying this kit
and using the same name for the logo file.
references:
- https://urlscan.io/result/4467573b-d13a-4f2c-85df-5dbce3de9eda
- https://urlscan.io/result/7d71c1c0-da74-41bf-b4c7-25e9ba421f1e
- https://urlscan.io/result/d4890e94-a7e6-4b9a-b4b2-fab8eaa3ccc3
- https://urlscan.io/result/dc6ff99f-d94c-4a7a-9337-af606fd6be21


detection:

logo:
requests|contains: 'fb4.png'

googleTagId:
dom|contains: 'UA-178388451-1'

Expand Down

0 comments on commit 634fbe5

Please sign in to comment.