Etherscan Crypto Phishing Kit 253344b

Detects a phishing kit targeting users of Etherscan.

References

IOK Rule (edit)

title: Etherscan Crypto Phishing Kit 253344b
description: |
    Detects a phishing kit targeting users of Etherscan.

references:
    - https://urlscan.io/result/253344bb-8f9f-4ac6-8449-a2730776d9b6

detection:

    jsCode:
      js|contains: 'api.php?sendValue'

    localStorageItem:
      js|contains: 'urcheckacstate'

    condition: jsCode and localStorageItem

tags:
  - kit
  - target.etherscan