AT related malicious URL (yandex .ru/showcaptchafast?d=E5CE661CC36210BA21921DEF8502412514E3E26D9A4BDCB41AA852D68A3EEE84F016E1018D7F53DCAB9939DCBE23AC5BCAE695F1EF&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9MjExNjg3MTc%2C_ca5191c7931ca4352fae0a7ab1a27d68&s=db204c157019ab35d73336547eb5f308)
Sourcejulioliraup/antiphishing
Fileantiphishing.rules
CreatedMay 22, 2026
UpdatedJune 25, 2026
Classificationsocial-engineering
alert http $HOME_NET any -> any any (msg:"AT related malicious URL (yandex .ru/showcaptchafast?d=E5CE661CC36210BA21921DEF8502412514E3E26D9A4BDCB41AA852D68A3EEE84F016E1018D7F53DCAB9939DCBE23AC5BCAE695F1EF&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9MjExNjg3MTc%2C_ca5191c7931ca4352fae0a7ab1a27d68&s=db204c157019ab35d73336547eb5f308)"; flow:established,to_server ; http.uri; content:"/showcaptchafast?d=E5CE661CC36210BA21921DEF8502412514E3E26D9A4BDCB41AA852D68A3EEE84F016E1018D7F53DCAB9939DCBE23AC5BCAE695F1EF&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9MjExNjg3MTc%2C_ca5191c7931ca4352fae0a7ab1a27d68&s=db204c157019ab35d73336547eb5f308"; startswith; fast_pattern; http.host; content:"yandex.ru"; endswith; reference:url,phishstats.info ; reference:url,github.com/julioliraup/Antiphishing ; reference:url,julioliraup.github.io/AT/signature.html?sid=6001303 ; classtype:social-engineering; sid:6001303; rev:2; metadata:signature_severity Major, created_et 2026_05_11, updated_et 2026_06_25;)
References
Metadata
signature severityMajor
created et2026_05_11
updated et2026_06_25
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!