- novi pattern za Webmail phishing

diff --git a/99_carnet.cf b/99_carnet.cf
index 5c5b251..52dcafb 100644 (file)
--- a/99_carnet.cf
+++ b/99_carnet.cf
@@ -13,3 +13,11 @@ body        __CN_PHISH2_CODE    /error code [a-zA-Z0-9]+/i
 meta        CN_PHISH2           (__CN_PHISH2_SUB && __CN_PHISH2_BODY && __CN_PHISH2_BODY2 && __CN_PHISH2_CODE)
 score       CN_PHISH2           10.0
 describe    CN_PHISH2           CARNet-Debian phish signature 2
+
+header      __CN_PHISH3_SUB     Subject =~ /^Dear.*Account.*User/i
+body        __CN_PHISH3_BODY    /Internet Webmail message center/i
+body        __CN_PHISH3_BODY2   /You are advice to verify/i
+body        __CN_PHISH3_BODY3   /lose his or her account permanently/i
+meta        CN_PHISH3           (__CN_PHISH3_SUB && __CN_PHISH3_BODY && __CN_PHISH3_BODY2 && __CN_PHISH3_BODY3)
+score       CN_PHISH3           10.0
+describe    CN_PHISH3           CARNet-Debian phish signature 3