alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET INFO PhishMe?.com Phishing Exercise - Client Plugins"; flow:to_server,established; urilen:15; content:"POST"; http_method; content:"/plugin_surveys"; http_uri; fast_pattern; content:"_phishme.com_session_id="; http_cookie; metadata: former_category INFO; classtype:trojan-activity; sid:2022729; rev:2; metadata:attack_target Client_Endpoint, deployment Perimeter, tag Phishing, signature_severity Major, created_at 2016_04_13, updated_at 2016_07_01;)

Added 2019-11-11 19:11:52 UTC


alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET INFO PhishMe?.com Phishing Exercise - Client Plugins"; flow:to_server,established; urilen:15; content:"POST"; http_method; content:"/plugin_surveys"; http_uri; fast_pattern; content:"_phishme.com_session_id="; http_cookie; classtype:trojan-activity; sid:2022729; rev:2; metadata:attack_target Client_Endpoint, deployment Perimeter, tag Phishing, signature_severity Major, created_at 2016_04_13, updated_at 2016_07_01;)

Added 2017-08-07 21:17:41 UTC


alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET INFO PhishMe?.com Phishing Exercise - Client Plugins"; flow:to_server,established; urilen:15; content:"POST"; http_method; content:"/plugin_surveys"; http_uri; fast_pattern; content:"_phishme.com_session_id="; http_cookie; classtype:trojan-activity; sid:2022729; rev:2;)

Added 2016-04-13 17:13:02 UTC


Topic revision: r1 - 2019-11-12 - TWikiGuest
 
This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright © Emerging Threats