Versions (3)
Version DetailsCurrent
Rev: 1 • Feb 10, 2024, 12:00 PMET PHISHING Observed Phishing Related Domain [Redacted - Vulgar]
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"ET PHISHING Observed Phishing Related Domain [Redacted - Vulgar]"; flow:established,to_server; tls.sni; bsize:14; content:"|6e 69 67 67 61 2e 6f 6b 74 61 2e 63 6f 6d|"; fast_pattern; classtype:social-engineering; sid:2050788; rev:1; metadata:attack_target Client_and_Server, created_at 2024_02_10, deployment Perimeter, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_02_12;)
Feb 10, 2024, 12:00 PM
Feb 12, 2024, 12:00 PM
Feb 12, 2024, 11:00 PM
Aug 14, 2025, 9:34 PM
rules/emerging-phishing.rules