Coinsbit Phishing Kit a4a01a8

Detects a Coinsbit phishing kit.

References

IOK Rule (edit) 

title: Coinsbit Phishing Kit a4a01a8
description: |
    Detects a Coinsbit phishing kit.
    
references:
    - https://urlscan.io/result/a4a01a85-548f-46cd-94cf-91634a4f30bd
    - https://urlscan.io/result/ff1d5bdf-e40a-420b-89d8-5669bd800a5a

detection:

  fakeForm: 
    html|contains|all: 
        - 'enviarlogin();'
        - 'input_16'
        - 'input_17'

  fontJs:
    requests|contains: 'iconfontd630.js?v=1643358052'

  condition: fakeForm and fontJs

tags:
  - kit
  - target.coinsbit