AT related malicious URL (yandex .ru/showcaptchafast?d=E5CE661CC36210BA21921DEF8502412514E3E26D9A4BDCB41AA852D68A3EEE84F016E1018D7F53DCAB9939DCBE23AC5BCAE695F1EF&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9MjExNjg3MTc%2C_ca5191c7931ca4352fae0a7ab1a27d68&s=db204c157019ab35d73336547eb5f308)

SID: 6001303Rev: 20 views
Sourcejulioliraup/antiphishing
CreatedMay 22, 2026
UpdatedMay 22, 2026
Classificationsocial-engineering
alert http $HOME_NET any -> any any (msg:"AT related malicious URL (yandex .ru/showcaptchafast?d=E5CE661CC36210BA21921DEF8502412514E3E26D9A4BDCB41AA852D68A3EEE84F016E1018D7F53DCAB9939DCBE23AC5BCAE695F1EF&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9MjExNjg3MTc%2C_ca5191c7931ca4352fae0a7ab1a27d68&s=db204c157019ab35d73336547eb5f308)"; flow:established,to_server; http.uri; content:"/showcaptchafast?d=E5CE661CC36210BA21921DEF8502412514E3E26D9A4BDCB41AA852D68A3EEE84F016E1018D7F53DCAB9939DCBE23AC5BCAE695F1EF&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9MjExNjg3MTc%2C_ca5191c7931ca4352fae0a7ab1a27d68&s=db204c157019ab35d73336547eb5f308"; startswith; fast_pattern; http.host; content:"yandex.ru"; endswith; reference:url,phishstats.info; reference:url,github.com/julioliraup/Antiphishing; reference:url,julioliraup.github.io/ET/signature.html?sid=6001303; classtype:social-engineering; sid:6001303; rev:2; metadata:signature_severity Major, created_et 2026_05_11, updated_et 2025_05_11;)

Metadata

signature severityMajor
created et2026_05_11
updated et2025_05_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!