Banco Atlántida Phishing Kit dxde4jyt

Detects a Banco Atlántida phishing kit deployed often on replit.com.

References

IOK Rule (edit) 

title: Banco Atlántida Phishing Kit dxde4jyt
description: |
    Detects a Banco Atlántida phishing kit deployed often on replit.com.
    
references:
    - https://urlscan.io/result/8d1ab6fe-25f5-4418-8afb-ea7cb29c293b
    - https://urlscan.io/result/ed00d101-e91d-4013-bbc5-636f793c3168
    - https://urlscan.io/result/ebcc8d44-337f-4648-964a-d957d9c4acba
    - https://urlscan.io/result/d9673b15-1867-4c76-8769-da48ed3c2c33

detection:

    form:
      html|contains|all:
        - form class="sapUiForm sapUiFormEdit sapUiFormEdit-CTX sapUiFormLblColon sapUiFormM"
        - action="load.php"

    img:
      html|contains|all:
        - logo_banco_single_red_gradient.svg"
        - logo002.svg
        - logo_banco_single_white.svg

    condition: form and img

tags:
  - kit
  - target.banco_atlantida
  - target_country.honduras