From 0e2aca5a333686ce8417231a4ed2fce278b4e2e9 Mon Sep 17 00:00:00 2001 From: Dinko Korunic Date: Wed, 1 Apr 2009 16:02:42 +0200 Subject: [PATCH] - novi pattern za Webmail phishing --- 99_carnet.cf | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/99_carnet.cf b/99_carnet.cf index 5c5b251..52dcafb 100644 --- a/99_carnet.cf +++ b/99_carnet.cf @@ -13,3 +13,11 @@ body __CN_PHISH2_CODE /error code [a-zA-Z0-9]+/i meta CN_PHISH2 (__CN_PHISH2_SUB && __CN_PHISH2_BODY && __CN_PHISH2_BODY2 && __CN_PHISH2_CODE) score CN_PHISH2 10.0 describe CN_PHISH2 CARNet-Debian phish signature 2 + +header __CN_PHISH3_SUB Subject =~ /^Dear.*Account.*User/i +body __CN_PHISH3_BODY /Internet Webmail message center/i +body __CN_PHISH3_BODY2 /You are advice to verify/i +body __CN_PHISH3_BODY3 /lose his or her account permanently/i +meta CN_PHISH3 (__CN_PHISH3_SUB && __CN_PHISH3_BODY && __CN_PHISH3_BODY2 && __CN_PHISH3_BODY3) +score CN_PHISH3 10.0 +describe CN_PHISH3 CARNet-Debian phish signature 3 -- 1.7.10.4