IOK Rules: threat_actor.chenlun

Chenlun Phishing Kit 88426540

Detect phishing sites that contain two distinctive files named ResourceRedConfig.js and urlConfig.json. These files are indicative of a phishing kit developed by a Chinese threat actor named Chenlun.