1 header __CN_PHISH1_SUB Subject =~ /^Confirm your email identity/i
2 body __CN_PHISH1_BODY /Confirm your email identity below/i
3 body __CN_PHISH1_CODE /Warning Code:[a-zA-Z0-9]+/
4 body __CN_PHISH1_CODE2 /network system with error code [a-zA-Z0-9]+/
5 meta CN_PHISH1 __CN_PHISH1_SUB && __CN_PHISH1_BODY && __CN_PHISH1_CODE && __CN_PHISH1_CODE2
7 describe CN_PHISH1 CARNet-Debian phish signature 1
9 header __CN_PHISH2_SUB Subject =~ /^Message from/i
10 body __CN_PHISH2_BODY /account update our account/i
11 body __CN_PHISH2_BODY2 /authomatically spam free/i
12 body __CN_PHISH2_CODE /error code [a-zA-Z0-9]+/i
13 meta CN_PHISH2 __CN_PHISH2_SUB && __CN_PHISH2_BODY && __CN_PHISH2_BODY2 && __CN_PHISH2_CODE
15 describe CN_PHISH2 CARNet-Debian phish signature 2
17 header __CN_PHISH3_SUB Subject =~ /^Dear.*Account.*User/i
18 body __CN_PHISH3_BODY /Internet Webmail message center/i
19 body __CN_PHISH3_BODY2 /You are advice to verify/i
20 body __CN_PHISH3_BODY3 /lose his or her account permanently/i
21 meta CN_PHISH3 __CN_PHISH3_SUB && __CN_PHISH3_BODY && __CN_PHISH3_BODY2 && __CN_PHISH3_BODY3
23 describe CN_PHISH3 CARNet-Debian phish signature 3
25 header __CN_SPAM4_SUB Received =~ /CommuniGate Pro SMTP/i
26 body __CN_SPAM4_CODE /westeur-consult\.com/
27 meta CN_SPAM4 __CN_SPAM4_SUB && __CN_SPAM4_CODE
29 describe CN_SPAM4 CARNet-Debian spam signature 4