AT related malicious URL (metalrisrl.musvc4.net/e/tr?amp\;mupckp=mupAtu4m8OiX0wt&q=5=PcCTR%2526G=4%2526F=KV8%2526G=NX5WM%2526P=kLCKv_JjxS_UT_MTui_WI_JjxS_TYTxM1AnQ.vJp_JjxS_TYNsG8%25269=pMBQfV.70w%2526AB=WCbQ%2526Ov=TSW9bNXCSLX53t6dUN%2526C=BZv8ATLchSxchVMb77xbC6t8e7tb0XMaBVO9CYL648u74ZPZeVNeiXSV58QXfWS8)

SID: 6010422Rev: 1EnabledDerived0 viewsHistory

Fileantiphishing.rules

CreatedJune 2, 2026

UpdatedJune 25, 2026

Classificationsocial-engineering

alert http $HOME_NET any -> any any (msg:"AT related malicious URL (metalrisrl.musvc4.net/e/tr?amp\;mupckp=mupAtu4m8OiX0wt&q=5=PcCTR%2526G=4%2526F=KV8%2526G=NX5WM%2526P=kLCKv_JjxS_UT_MTui_WI_JjxS_TYTxM1AnQ.vJp_JjxS_TYNsG8%25269=pMBQfV.70w%2526AB=WCbQ%2526Ov=TSW9bNXCSLX53t6dUN%2526C=BZv8ATLchSxchVMb77xbC6t8e7tb0XMaBVO9CYL648u74ZPZeVNeiXSV58QXfWS8)"; flow:established,to_server; http.uri; content:"/e/tr?amp|3b|mupckp=mupAtu4m8OiX0wt&q=5=PcCTR%2526G=4%2526F=KV8%2526G=NX5WM%2526P=kLCKv_JjxS_UT_MTui_WI_JjxS_TYTxM1AnQ.vJp_JjxS_TYNsG8%25269=pMBQfV.70w%2526AB=WCbQ%2526Ov=TSW9bNXCSLX53t6dUN%2526C=BZv8ATLchSxchVMb77xbC6t8e7tb0XMaBVO9CYL648u74ZPZeVNeiXSV58QXfWS8"; startswith; fast_pattern; http.host; content:"metalrisrl.musvc4.net"; endswith; reference:url,openphish.com; reference:url,julioliraup.github.io/AT/signature.html?sid=6010422; classtype:social-engineering; sid:6010422; rev:1; metadata:signature_severity Major, created_et 2026_06_01, updated_et 2026_06_25;)

References

url	openphish.com
url	julioliraup.github.io/AT/signature.html?sid=6010422

References

Metadata

Comments (0)