Facebook Phishing Kit 54b8f7e Landing Page

Detects the landing page of this specific phishing kit.

References

IOK Rule (edit) 

title: Facebook Phishing Kit 54b8f7e Landing Page
description: |
    Detects the landing page of this specific
    phishing kit.
    
references:
   - https://urlscan.io/result/54b8f7ec-22f8-416f-b253-213d28262587
   - https://urlscan.io/result/d45ebbf2-ecf0-4a83-a908-7c7d08522d1c
   
detection:

  textContent: 
    html|contains|all:
      - 'Please Confirm Your Identity'
      - "Recent activity may have affected your account's security, so we've locked it. we'll walk you through a few steps to confirm your identity and help you access your account."

  logoImage:
    requests|contains: 'okee.png'

  condition: textContent and logoImage

tags:
  - page_type.landing
  - target.facebook