2021760 < Main < EmergingThreats

#alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET DELETED PHISH Generic Webmail - Landing Page Sept 11"; flow:established,to_client; file_data; content:"Webmail Login"; fast_pattern; content:"For Webmail to function properly"; distance:0; content:"you must enable <span class="twikiNewLink">JavaScript<a href="/bin/edit/Main/JavaScript?topicparent=Main.2021760" rel="nofollow" title="Create this topic">?</a></span>"; distance:0; content:"You have logged out"; distance:0; content:"Please select a locale"; distance:0; content:"Email Address"; distance:0; classtype:trojan-activity; sid:2021760; rev:3; metadata:created_at 2015_09_11, former_category PHISHING, updated_at 2021_06_23;) <p /> </h2> <p /> Added 2021-06-23 19:31:51 UTC <p /> <p /> <form method="post" action="https://doc.emergingthreats.net/bin/save/Main/2021760" enctype="multipart/form-data" id="threadmode0" name="threadmode0"><input type="hidden" name="crypttoken" value="528165706a754b6648a6d949f2681a3f" /><div class="commentPlugin commentPluginPromptBox" style="margin: 5px 0;"> <div><textarea rows="5" cols="80" name="comment" class="twikiTextarea" wrap="soft" style="width: 100%" onfocus="if(this.value=='Please enter documentation, comments, false positives, or concerns with this signature. Press the Attach button below to add samples or Pcaps.')this.value=''" onblur="if(this.value=='')this.value='Please enter documentation, comments, false positives, or concerns with this signature. Press the Attach button below to add samples or Pcaps.'">Please enter documentation, comments, false positives, or concerns with this signature. Press the Attach button below to add samples or Pcaps.</textarea></div><div style="padding: 5px 0 0 0;"><input type="submit" value="Add to Documentation" class="twikiButton" /></div> </div> <input type="hidden" name="comment_action" value="save" /> <input type="hidden" name="comment_type" value="threadmode" /> <input type="hidden" name="comment_index" value="0" /></form> <p /> <hr> <p /> <p /> <p /> <h2> <p /> <p /> #alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET DELETED PHISH Generic Webmail - Landing Page Sept 11"; flow:established,to_client; file_data; content:"<title>Webmail Login"; fast_pattern:8,20; content:"For Webmail to function properly"; distance:0; content:"you must enable JavaScript?"; distance:0; content:"You have logged out"; distance:0; content:"Please select a locale"; distance:0; content:"Email Address"; distance:0; classtype:trojan-activity; sid:2021760; rev:2; metadata:created_at 2015_09_11, updated_at 2015_09_11;)

Added 2018-09-13 19:51:41 UTC

Added 2018-09-13 18:00:23 UTC

Added 2017-08-07 21:16:30 UTC

Added 2016-02-08 18:03:48 UTC

Added 2015-09-11 18:50:02 UTC

Topic revision: r1 - 2021-06-23 - TWikiGuest