1 header __CN_PHISH1_SUB Subject =~ /^Confirm your email identity/i
2 body __CN_PHISH1_BODY /Confirm your email identity below/i
3 body __CN_PHISH1_CODE /Warning Code:[a-zA-Z0-9]+/
4 body __CN_PHISH1_CODE2 /network system with error code [a-zA-Z0-9]+/
5 meta CN_PHISH1 (__CN_PHISH1_SUB && __CN_PHISH1_BODY && __CN_PHISH1_CODE && __CN_PHISH1_CODE2)
7 describe CN_PHISH1 CARNet-Debian phish signature 1
9 header __CN_PHISH2_SUB Subject =~ /^Message from/i
10 body __CN_PHISH2_BODY /account update our account/i
11 body __CN_PHISH2_BODY2 /authomatically spam free/i
12 body __CN_PHISH2_CODE /error code [a-zA-Z0-9]+/i
13 meta CN_PHISH2 (__CN_PHISH2_SUB && __CN_PHISH2_BODY && __CN_PHISH2_BODY2 && __CN_PHISH2_CODE)
15 describe CN_PHISH2 CARNet-Debian phish signature 2
17 header __CN_PHISH3_SUB Subject =~ /^Dear.*Account.*User/i
18 body __CN_PHISH3_BODY /Internet Webmail message center/i
19 body __CN_PHISH3_BODY2 /You are advice to verify/i
20 body __CN_PHISH3_BODY3 /lose his or her account permanently/i
21 meta CN_PHISH3 (__CN_PHISH3_SUB && __CN_PHISH3_BODY && __CN_PHISH3_BODY2 && __CN_PHISH3_BODY3)
23 describe CN_PHISH3 CARNet-Debian phish signature 3