Instagram Copyright Phishing Kit YZvbOv

Detects a phishing kit targeting Instagram by impersonating Instagram staff and tricking the user into filling out a fake copyright appeal form.

References

IOK Rule (edit) 

title: Instagram Copyright Phishing Kit YZvbOv
description: |
    Detects a phishing kit targeting Instagram by impersonating Instagram staff and tricking the user into filling out a fake copyright appeal form.


references:
    - https://urlscan.io/result/683c7d86-38a0-4297-a2e1-a9fffe01db01/

detection:

    css:
      html|contains|all:
        - link rel="stylesheet" type="text/css" href="input.css"
        - link rel="stylesheet" type="text/css" href="\Ritalixig\CSS\syle.css"
        - link rel="stylesheet" type="text/css" href="\Ritalixig\assest\syle.css"

    title:
      html|contains:
        - <title>Instagram | Help Center</title>

    form:
      html|contains:
        - form class="login-form" method="post"


    condition: css and title and form

tags:
  - kit
  - target.instagram