Versions (2)
Version DetailsCurrent
Rev: 1 • May 31, 2022, 12:00 PM🐾 - 🔒 TLS connexion to free hosting service observed in 🎣 phishing campaign
alert tls any any -> any any (msg:"🐾 - 🔒 TLS connexion to free hosting service observed in 🎣 phishing campaign"; flow:established,to_server; tls_sni; content:"coffeecup.com"; nocase; endswith; classtype:trojan-activity; metadata:created_at 2022_05_31, updated_at 2022_05_31; sid:3312705; rev:1;)
May 31, 2022, 12:00 PM
May 31, 2022, 12:00 PM
May 1, 2024, 7:00 PM
May 1, 2024, 7:00 PM
rules/PAW-PATRULES_PHISHING.rules