Banco del Pacífico Phishing Kit 1kzes5jt

Detects a Banco del Pacífico phishing kit deployed often on replit.com.

References

IOK Rule (edit) 

title: Banco del Pacífico Phishing Kit 1kzes5jt
description: |
    Detects a Banco del Pacífico phishing kit deployed often on replit.com.
    
references:
    - https://urlscan.io/result/c1ff2f4a-eb5a-4350-b8bd-cddd6f800ce4
    - https://www.intermatico.com/ebanking/seguridad/login.htm

detection:

    form:
      html|contains|all:
        - form id="login"
        - action="seguridad/login.php"

    img:
      html|contains|all:
        - img src="../images/PACIFICO/alert-octagon.png"
        - img src="../images/PACIFICO/key.png"
        - img src="../images/PACIFICO/globe.png"
        - img src="../images/PACIFICO/loaderPACIFICO.gif"

    condition: form and img

tags:
  - kit
  - target.banco_del_pacifico
  - target_country.ecuador