1 header __CN_PHISH1_SUB Subject =~ /^Confirm your email identity/i
2 body __CN_PHISH1_BODY /Confirm your email identity below/i
3 body __CN_PHISH1_CODE /Warning Code:[a-zA-Z0-9]+/
4 body __CN_PHISH1_CODE2 /network system with error code [a-zA-Z0-9]+/
5 meta CN_PHISH1 (__CN_PHISH1_SUB && __CN_PHISH1_BODY && __CN_PHISH1_CODE && __CN_PHISH1_CODE2)
7 describe CN_PHISH1 CARNet-Debian phish signature 1
9 header __CN_PHISH2_SUB Subject =~ /^Message from/i
10 body __CN_PHISH2_BODY /account update our account/i
11 body __CN_PHISH2_BODY2 /authomatically spam free/i
12 body __CN_PHISH2_CODE /error code [a-zA-Z0-9]+/i
13 meta CN_PHISH2 (__CN_PHISH2_SUB && __CN_PHISH2_BODY && __CN_PHISH2_BODY2 && __CN_PHISH2_CODE)
15 describe CN_PHISH2 CARNet-Debian phish signature 2