🐾 - 🔒 TLS connexion to default Azure domain > observed in 🎣 phishing campaign
Sourcepawpatrules
CreatedApril 16, 2022
UpdatedJanuary 6, 2025
Classificationbad-unknown
alert tls any any -> any any (msg:"🐾 - 🔒 TLS connexion to default Azure domain > observed in 🎣 phishing campaign"; flow:established,to_server; tls_sni; content:!"officewhatsnew."; nocase; startswith; content:".web.core.windows.net"; nocase; fast_pattern; endswith; classtype:bad-unknown; metadata:created_at 2022_04_16, updated_at 2025_01_06; sid:3312701; rev:2;)
Metadata
created at2022_04_16
updated at2025_01_06
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!