This phishing kit (reported on by Cofense in 2022, but first seen on urlscan.io in 2018) has a live countdown until a user's email is supposedly "deleted from our server".
title: '"Validate your account" countdown timer'
description: |
This phishing kit (reported on by Cofense in 2022, but first seen on urlscan.io in 2018) has a live countdown
until a user's email is supposedly "deleted from our server".
references:
- https://cofense.com/blog/countdown-timer-ransomware-themed-phishing-attack
detection:
scareText:
html|contains|all:
- <span style="color:gold; font-size:35px;"><span id="timer">
- <span style="color:gold;">seconds</span> to validate your account (
- ) else it will be deleted from our server
condition: scareText
tags:
- kit
- target.generic-email