Steam Phishing Kit 4f8189ec

Steam Phishing Kit that uses a fake Steam login window to steal user credentials.

References

IOK Rule (edit) 

title: Steam Phishing Kit 4f8189ec
description: |
  Steam Phishing Kit that uses a fake Steam login window to steal user credentials.

references:
  - https://urlscan.io/result/a8e88026-7174-4830-bfb4-b90baef8a1b8/
  - https://urlscan.io/result/4f8189ec-be6e-4992-a7a7-ce3ecf762657/
  - https://urlscan.io/result/469a2692-f629-4c41-b8c0-493063ae71d1/

detection:

    htmlContent:
      html|contains|all: 
        - '<p class="text">*Log in through the Steam service</p>'
        - '<p class="sub">*mailguard accounts cannot participate in our games</p>'

    condition: htmlContent

tags:
  - kit
  - target.steam