Back to Rule

Rule History

SID: 3312709 • Source: pawpatrules

Versions (2)

Version DetailsCurrent

Rev: 2Oct 12, 2022, 12:00 PM

🐾 - 🔒 TLS connexion to free hosting service observed in 🎣 phishing campaign

alert tls any any -> any any (msg:"🐾 - 🔒 TLS connexion to free hosting service observed in 🎣 phishing campaign"; flow:established,to_server; tls_sni; content:".boxmode.io"; nocase; endswith; classtype:trojan-activity; metadata:created_at 2022_10_12, updated_at 2022_10_12; sid:3312709; rev:2;)

Oct 12, 2022, 12:00 PM

Oct 12, 2022, 12:00 PM

May 1, 2024, 7:00 PM

May 1, 2024, 7:00 PM

rules/PAW-PATRULES_PHISHING.rules