AT related malicious URL (login.authhmicrosoftonline.sbs/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639274725096725510.NDIyYTFhMjItN2ExMS00MDJjLTg5Y2QtNmQ5YzUzOWVlYTM1ZmZkZDUxYjktZTc4ZS00NTk4LTkwMDUtMDAxOWY1ZDFkNDRi&ui_locales=en-US&mkt=en-US&client-request-id=20b23292-96c1-4b6f-b72a-9466615868d7&siwa=1&siwg=1&state=NqneNs-2IDzYZWsoIZquc1KgQiTKYsnrOKQS-Dm2PKQNTUYQi4fQcBtTctACc8MZG-2jwcgQw08I-IgyB5uG_VWr2OPxLJgR3Nobd0XLh4ty87hY7fT_ulN4nsjV02pJHovhhLAQHkgqrzge-aI5ExHTG0i5Zm1VkmeY8GJgiFJ8oG59B3u5Cc3tBCJUdCiRiCTyMIUbJzA2nD3vj2KR1VrZqY22YeIqG7N2xSZ988Pb249dJ00YVY-qvt3hcX0Djns2h_NWDcr9G900PG68Vj0Bh_VerdpQtrMt4poQLsHUzrM73CsxfABIAFNLp2Xd7R5laHzGLUlQle7u-aIfQ5oIqjjV5KxX6JAsu28H3KV-D-Vua2hv1v4p9rCE_2n2Kiln3saMPCkY-jE3nODMa_5PjDZFcLcRN7v_2FsubZGvtfkwRP-HYdNE9855rD-a&x-client-SKU=ID_NET8_0&x-client-ver=8.16.0.0)
Sourcejulioliraup/antiphishing
Fileantiphishing.rules
CreatedOctober 13, 2026
UpdatedOctober 13, 2026
Classificationsocial-engineering
alert http $HOME_NET any -> any any (msg:"AT related malicious URL (login.authhmicrosoftonline.sbs/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639274725096725510.NDIyYTFhMjItN2ExMS00MDJjLTg5Y2QtNmQ5YzUzOWVlYTM1ZmZkZDUxYjktZTc4ZS00NTk4LTkwMDUtMDAxOWY1ZDFkNDRi&ui_locales=en-US&mkt=en-US&client-request-id=20b23292-96c1-4b6f-b72a-9466615868d7&siwa=1&siwg=1&state=NqneNs-2IDzYZWsoIZquc1KgQiTKYsnrOKQS-Dm2PKQNTUYQi4fQcBtTctACc8MZG-2jwcgQw08I-IgyB5uG_VWr2OPxLJgR3Nobd0XLh4ty87hY7fT_ulN4nsjV02pJHovhhLAQHkgqrzge-aI5ExHTG0i5Zm1VkmeY8GJgiFJ8oG59B3u5Cc3tBCJUdCiRiCTyMIUbJzA2nD3vj2KR1VrZqY22YeIqG7N2xSZ988Pb249dJ00YVY-qvt3hcX0Djns2h_NWDcr9G900PG68Vj0Bh_VerdpQtrMt4poQLsHUzrM73CsxfABIAFNLp2Xd7R5laHzGLUlQle7u-aIfQ5oIqjjV5KxX6JAsu28H3KV-D-Vua2hv1v4p9rCE_2n2Kiln3saMPCkY-jE3nODMa_5PjDZFcLcRN7v_2FsubZGvtfkwRP-HYdNE9855rD-a&x-client-SKU=ID_NET8_0&x-client-ver=8.16.0.0)"; reference:url,openphish.com ; reference:url,julioliraup.github.io/AT/signature.html?sid=6026274 ; classtype:social-engineering; sid:6026274; rev:1; metadata:signature_severity Major, created_et 2026_10_13;)
Detection details are hidden.
References
Metadata
signature severityMajor
created et2026_10_13
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!