ToastrJS Crypto Drainer 0d0f9db

IOK Rule (edit)

title: ToastrJS Crypto Drainer 0d0f9db
description: |
    Detects a crypto drainer.

references:
    - https://urlscan.io/result/0d0f9dbc-de02-4ba7-b141-90938b828c82
    - https://urlscan.io/result/d83511c9-e75f-4b58-a06f-6b093eed01d3

detection:

    fileName:
      requests|contains: 'toastr.js'

    faviconSrc:
      html|contains: 'bootcs.com/fav.ico'

    condition: fileName and faviconSrc

tags:
  - cryptocurrency
  - cryptocurrency.ethereum