ETC Phishing Kit e623c655

IOK Rule (edit)

title: ETC Phishing Kit e623c655
description: |
    Detects an ETC phishing kit targeting Japanese users. (etc-meisai.jp)

references:
    - https://urlscan.io/result/e623c655-a8f4-470d-9e83-be7bd8c201c6
    - https://urlscan.io/result/e33beca0-d6d7-4bfd-8a57-3818d079d504
    - https://urlscan.io/result/516e7e00-2ddb-4036-b44c-33456e3e195a

detection:

    etcTitle:
        title: 'ETC利用照会サービス'
        
    pagePHP:
        requests|contains: 'funccode.php'

    condition: etcTitle and pagePHP

tags:
  - kit
  - target.etc_meisai
  - target_country.japan