Facebook intellectual property infringment phishing kit 6c79b

A Facebook phishing kit themed around intellectual property infringement

Observed being distributed by emailtosalesforce@[...].salesforce.com email addresses

References

IOK Rule (edit)

title: Facebook intellectual property infringment phishing kit 6c79b
description: |
  A Facebook phishing kit themed around intellectual property infringement
  
  Observed being distributed by emailtosalesforce@[...].salesforce.com email addresses
references:
  - https://urlscan.io/result/4bedbfd8-31f2-4719-85a5-069b72e266fd/

detection:
  background:
    requests|contains: 'banner.6c79bf718e7d7de19193.png'
    
  condition: background

tags:
  - kit
  - target.facebook