BBVA Phishing Kit dd072db

Detects a Banco Bilbao Vizcaya Argentaria (BBVA) phishing kit targeting Argentinian users.

References

IOK Rule (edit) 

title: BBVA Phishing Kit dd072db
description: |
    Detects a Banco Bilbao Vizcaya Argentaria (BBVA) phishing kit targeting Argentinian users.
    
references:
    - https://urlscan.io/result/dec43513-7a12-4cfa-84c1-1a73b9fba8d5
    - https://urlscan.io/result/552aa734-2b2c-4f17-8cfe-92bdc38897e8
    - https://urlscan.io/result/f37238c1-d40e-4c72-b6f6-e3dd4812c39f
    
detection:

    cssFile:
      requests|contains: 'mafalda.css'
        
    dataComponentIdAttribute:
      html|contains: 'dd072dbe-f468-4569-a1a2-8812203f5bf5'

    condition: cssFile and dataComponentIdAttribute

tags:
  - kit
  - target.bbva
  - target_country.argentina