""ET CURRENT_EVENTS Manhattan College Phish Landing Page 2022-01-10""
SID: 2043286
Revision: 1
Class Type: trojan-activity
Metadata: attack_target Client_Endpoint, created_at 2023_01_11, deployment Perimeter, performance_impact Low, signature_severity Major, updated_at 2023_01_11, reviewed_at 2024_08_19
Reference:
-
md5
-
fad9485f5b89cfb9ba3490ffb767a850
Protocol: tcp
Source Network: $EXTERNAL_NET
Source Port: $HTTP_PORTS
Destination Network: $HOME_NET
Destination Port: any
Flow: established,to_client
Contents:
-
Value: "|3c 21 2d 2d 20|saved|20|from|20|url|3d 28|0014|29|about|3a|internet|20 2d 2d 3e|"
-
Value: "|3c|title|3e|JasperNET|20|Login|3c 2f|title|3e|"
-
Value: "|3c|link|20|rel|3d 22|icon|22 20|href|3d 22|https|3a 2f 2f|auth|2e|manhattan|2e|edu|2f|idp|2f|ellucian|2f|favicon|2e|ico|22 20|type|3d 22|image|2f|x|2d|icon|22 3e|"
Within:
PCRE:
Special Options: