Banco AV Villas Phishing Kit a5lnamb9

Detects a Banco AV Villas phishing kit deployed often on replit.com targeting Colombian citizens.

References

IOK Rule (edit) 

title: Banco AV Villas Phishing Kit a5lnamb9
description: |
    Detects a Banco AV Villas phishing kit deployed often on replit.com targeting Colombian citizens.

references:
    - https://urlscan.io/result/c1fd550b-afb4-4532-9c7b-92cd53aa13b9
    - https://www.avvillas.com.co/bancadigital/inicio

detection:

    title:
      html|contains:
        - <title>Consultas Banca Virtual | Banco AV Villas</title>

    meta:
      html|contains:
        - <meta name="description" content="En la Banca Virtual AV Villas realiza consultas, pagos y transferencias en cualquier momento. Conoce también nuestros productos digitales con solicitud en línea.">

    favicon:
      html|contains:
        - <link rel="icon" href="https://www.avvillas.com.co/bancadigital/assets/img/favicon.png">

    form:
      html|contains:
        - <form _ngcontent-ixl-c3="" class="login-form ng-untouched ng-invalid ng-pristine" method="post">

    condition: title and meta and favicon and form

tags:
  - kit
  - target.banco_av_villas
  - target_country.colombia