STEALER [PTsecurity] DarkCloud Browser Cookie Exfiltration

SID: 10016032Rev: 1Enabled2 views
Fileptopen-malware.rules
CreatedJune 23, 2026
UpdatedJune 23, 2026
Classificationtrojan-activity
alert smtp any any -> any any (msg:"STEALER [PTsecurity] DarkCloud Browser Cookie Exfiltration"; content:"Content-Disposition|3a| attachment"; content:"filename="; within:64; content:"Cookie"; within:64; content:"U1FMaXRl"; fast_pattern; within:128; reference:url, tria.ge/251104-k1x45ssla1/behavioral1; reference:url, rules.ptsecurity.com; classtype:trojan-activity; sid:10016032; rev:1;)

References

urltria.ge/251104-k1x45ssla1/behavioral1
urlrules.ptsecurity.com

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!