🐾 - 🔒 TLS connexion to qu-n.com 🚨 observed in 🎣 phishing campaign to steal credentials

SID: 3312712Rev: 10 views
Sourcepawpatrules
CreatedFebruary 13, 2023
UpdatedFebruary 13, 2023
Classificationbad-unknown
alert tls any any -> any any (msg:"🐾 - 🔒 TLS connexion to qu-n.com 🚨 observed in 🎣 phishing campaign to steal credentials"; flow:established,to_server; tls_sni; content:"qu-n.com"; nocase; endswith; classtype:bad-unknown; metadata:created_at 2023_02_13, updated_at 2023_02_13; sid:3312712; rev:1;)

Metadata

created at2023_02_13
updated at2023_02_13

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!