Amazon Token Cryptocurrency Scam SHFXgk

Detects a cyptocurrency phishing kit targeting Amazon. It claims to offer an Amazon (AMZ) token pre-sale and leads to an exchange where you can swap cryptocurrencies for this fake token. This was found as a result of this kit being deployed on Replit.

References

IOK Rule (edit)

title: Amazon Token Cryptocurrency Scam SHFXgk
description: |
    Detects a cyptocurrency phishing kit targeting Amazon. It claims to offer an Amazon (AMZ) token pre-sale and leads to an exchange where you can swap cryptocurrencies for this fake token.
    This was found as a result of this kit being deployed on Replit.


references:
    - https://urlscan.io/result/fdab2610-a5ad-4665-8ebb-bdcc5b8fb515/
    - https://urlscan.io/result/f045f38d-044d-4445-86d3-c5b1004a5fc9/
    - https://urlscan.io/result/b87affd1-1f6e-4bd8-b49e-d534993e96bb/

detection:
    title:
      html|contains:
        - <title>Amazon Pre-Sale for AMZ (up to 200% bonus)</title>

    meta:
      html|contains:
        - <meta name="description" content="Cryptocash is Professional Creative Template" />

    css:
      requests|contains:
        - cryptocoins.css

    condition: title and meta and css

tags:
  - kit
  - target.amazon
  - cryptocurrency