Facebook Phishing Kit 887906f

Detects a Facebook phishing kit targeting Vietnamese users. Using sexual lures such as 'Vietnamese Sexy Beauty Group'

References

IOK Rule (edit) 

title: Facebook Phishing Kit 887906f
description: |
    Detects a Facebook phishing kit targeting Vietnamese users.
    Using sexual lures such as 'Vietnamese Sexy Beauty Group'
    
references:
    - https://urlscan.io/result/863deff1-7f46-45be-8aa4-d538c47f8319
    - https://urlscan.io/result/d75c56e5-2d59-4bdf-b66e-3f699f1cf63f
    - https://urlscan.io/search/#filename:%22887906fc5a13ae4df702.jpg%22

detection:

    ogImage:
      html|contains: 'http://mfacabook.com/assets/img/214811860_10102151673807292_1574796297546264838_n.jpg'

    bannerImage:
      html|contains: 'https://1.bp.blogspot.com/-W90h_vIYs9w/YOEWPkKhZYI/AAAAAAAAAAM/96ojIoW5M341ggKZjs-elzJ0FhXHzQmhACNcBGAsYHQ/s16000/887906fc5a13ae4df702.jpg'

    condition: ogImage and bannerImage

tags:
  - kit
  - target.facebook
  - target_country.vietnam