Back to Rule

Rule History

SID: 3312706 • Source: pawpatrules

Versions (2)

Version DetailsCurrent

Rev: 2Aug 3, 2022, 12:00 PM

🐾 - 🔒 TLS connexion to free hosting service observed in 🎣 phishing campaign

alert tls any any -> any any (msg:"🐾 - 🔒 TLS connexion to free hosting service observed in 🎣 phishing campaign"; flow:established,to_server; tls_sni; content:!"www"; nocase; startswith; content:".clickfunnels.com"; nocase; endswith; classtype:trojan-activity; metadata:created_at 2022_08_03, updated_at 2022_08_03; sid:3312706; rev:2;)

Aug 3, 2022, 12:00 PM

Aug 3, 2022, 12:00 PM

May 1, 2024, 7:00 PM

May 1, 2024, 7:00 PM

rules/PAW-PATRULES_PHISHING.rules