Credicard Phishing Kit 7246c9c

Detects a Credicard phishing kit created by an
Portuguese threat actor.

References

IOK Rule (edit) 

title: Credicard Phishing Kit 7246c9c
description: |
    Detects a Credicard phishing kit created by an   
    Portuguese threat actor.

references:
    - https://urlscan.io/result/7246c9c8-b3df-4b4a-a3b4-4d78871e189d

detection:

    kitAssetsTimestamp:
      html|contains: '1664061802'

    validationScript:
      html|contains: 'indexb652.js'
    
    exfilPHPScript:
      js|contains: 'api.php'

    condition: kitAssetsTimestamp and validationScript and exfilPHPScript

tags:
  - kit
  - target.credicard