AT related malicious URL (oworkspace-sharepoint.eastasia.cloudapp.azure.com/U34UTJ5/:w:/r/personal/Document/Security/_layouts/15/AllItems.aspx/?sourcedoc=%7BDD577A58-83F8-127C-B8CE-73B67D962532%7D&FocusModeOff=1&fromShare=true&action=edit&toshare=mirynz@a6a4eab64ae04057cfce612cfd5eb94b005d.org&clickparams=bEc0aFoxbFY0dVcxdFAzcw==&scope=U34UTJ5&mobileredirect=true&wdLOR=cF091898E-2F1F-4E45-B2FC-C52CED619E)

SID: 6020829Rev: 1EnabledDerived1 views
Fileantiphishing.rules
CreatedJuly 13, 2026
UpdatedJuly 13, 2026
Classificationsocial-engineering
alert http $HOME_NET any -> any any (msg:"AT related malicious URL (oworkspace-sharepoint.eastasia.cloudapp.azure.com/U34UTJ5/:w:/r/personal/Document/Security/_layouts/15/AllItems.aspx/?sourcedoc=%7BDD577A58-83F8-127C-B8CE-73B67D962532%7D&FocusModeOff=1&fromShare=true&action=edit&toshare=mirynz@a6a4eab64ae04057cfce612cfd5eb94b005d.org&clickparams=bEc0aFoxbFY0dVcxdFAzcw==&scope=U34UTJ5&mobileredirect=true&wdLOR=cF091898E-2F1F-4E45-B2FC-C52CED619E)"; flow:established,to_server; http.uri; content:"/U34UTJ5/:w:/r/personal/Document/Security/_layouts/15/AllItems.aspx/?sourcedoc=%7BDD577A58-83F8-127C-B8CE-73B67D962532%7D&FocusModeOff=1&fromShare=true&action=edit&toshare=mirynz@a6a4eab64ae04057cfce612cfd5eb94b005d.org&clickparams=bEc0aFoxbFY0dVcxdFAzcw==&scope=U34UTJ5&mobileredirect=true&wdLOR=cF091898E-2F1F-4E45-B2FC-C52CED619E"; startswith; fast_pattern; http.host; content:"oworkspace-sharepoint.eastasia.cloudapp.azure.com"; endswith; reference:url,openphish.com; reference:url,julioliraup.github.io/AT/signature.html?sid=6020829; classtype:social-engineering; sid:6020829; rev:1; metadata:signature_severity Major, created_et 2026_07_13;)

References

urlopenphish.com
urljulioliraup.github.io/AT/signature.html?sid=6020829

Metadata

signature severityMajor
created et2026_07_13

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!