SMBC Phishing Kit 9776441

Detects a SMBC phishing kit targeting Japanese users.

References

IOK Rule (edit) 

title: SMBC Phishing Kit 9776441
description: |
    Detects a SMBC phishing kit targeting Japanese users.
    
references:
  - https://urlscan.io/result/9776441a-677b-4fc8-be55-0a1a9f4a6ee9
  - https://urlscan.io/search/#hash%3Aae9da3c9a568a7b3602dc54e10c324166db3abe1d3a6892770d6ce6a7cc8c1c6

detection:

  formAttributes:
    html|contains: 'method="post" action="/action/login.php"'

  jsFingerPrinter:
    requests|contains: 'vendor.23238u92u82.js'  # SHA256: ae9da3c9a568a7b3602dc54e10c324166db3abe1d3a6892770d6ce6a7cc8c1c6


  condition: formAttributes and jsFingerPrinter

tags:
  - kit
  - target_country.japan
  - target.smbc