Meta Phishing Kit 506188c

Detects a phishing kit targeting Meta products, utilising the false copyright infrigment appeal scam.

References

IOK Rule (edit) 

title: Meta Phishing Kit 506188c
description: |
    Detects a phishing kit targeting Meta products, utilising the
    false copyright infrigment appeal scam.
    
references:
    - https://urlscan.io/result/506188c3-df21-4551-921e-d5e99008997d
    - https://urlscan.io/result/89587bf3-324a-4c41-8f15-5c938b0695c7
    - https://urlscan.io/result/d9399dc1-2624-4959-a48f-46a6393a0e2f

detection:

  formHref: 
    html|contains: 'user-details.php'

  zewformJS:
    requests|contains: 'zewform.js'

  zewformComment:
    js|contains: '//bir snraki 2'

  condition: zewformJS and formHref and zewformComment

tags:
  - kit
  - target.meta