Metamask Phishing kit that uses WebFlow. Allowing us to flag it due to it having the same WebFlow site key for each phish.
title: Metamask Phishing Kit 604ec65
description: |
Metamask Phishing kit that uses WebFlow.
Allowing us to flag it due to it having the same WebFlow site key for each phish.
references:
- https://urlscan.io/result/8953ff2a-f891-40cb-9310-7edab6f0876a
- https://urlscan.io/result/b4830e43-ef8c-40ac-b4d7-ddf540f2c43b
detection:
webFlowSiteKey:
html|contains: 'data-wf-site="604ec65d7935b45ce251b35e"'
condition: webFlowSiteKey
tags:
- kit
- target.metamask