AT related malicious URL (b8376mghi5d.jp.larksuite.com/share/base/form/shrjpMwk5KEz3wmsdPQjPPcLjqh?auth_token=U7CK1RF-92bge0be-9f13-44b0-af44-f1e527tih92i-NN5W4)
Sourcejulioliraup/antiphishing
Fileantiphishing.rules
CreatedJuly 30, 2026
UpdatedAugust 15, 2026
Classificationsocial-engineering
alert http $HOME_NET any -> any any (msg:"AT related malicious URL (b8376mghi5d.jp.larksuite.com/share/base/form/shrjpMwk5KEz3wmsdPQjPPcLjqh?auth_token=U7CK1RF-92bge0be-9f13-44b0-af44-f1e527tih92i-NN5W4)"; flow:established,to_server ; http.uri; content:"/share/base/form/shrjpMwk5KEz3wmsdPQjPPcLjqh?auth_token=U7CK1RF-92bge0be-9f13-44b0-af44-f1e527tih92i-NN5W4"; startswith; fast_pattern; http.host; content:"b8376mghi5d.jp.larksuite.com"; endswith; reference:url,phishstats.info ; reference:url,julioliraup.github.io/AT/signature.html?sid=6000918 ; classtype:social-engineering; sid:6000918; rev:1; metadata:signature_severity Major, created_et 2026_07_30;)
Metadata
signature severityMajor
created et2026_07_30
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!