Commbank Phishing Kit d69bdec1

Commbank phishing kit displaying a fake login

References

IOK Rule (edit) 

title: Commbank Phishing Kit d69bdec1
description: |
  Commbank phishing kit displaying a fake login
  
references:
  - https://urlscan.io/result/49a46f7c-b531-417c-8110-b94942132039/
  - https://urlscan.io/result/605d7c8f-20dd-438d-8e2e-e4232bb067ef/
  - https://urlscan.io/result/d69bdec1-7377-466c-a1fd-44966dad8e0e/

detection:

  stylesheet:
    dom|contains: '<link href="/secure/static/css/main.27d81c4d.chunk.css" rel="stylesheet">'
    
  scriptJs:
    dom|contains: '<script src="/secure/static/js/3.b4db8f5a.chunk.js"></script>'
    
  condition: stylesheet and scriptJs

tags:
  - kit
  - target.commbank