| Path : /proc/2/task/2/cwd/usr/local/scan/lw-yara/includes/ |
| Current File : //proc/2/task/2/cwd/usr/local/scan/lw-yara/includes/well-phishing0001.yar |
rule phishing_well_fargo
{
meta:
author = "Brian Laskowski"
info = " wells fargo phishing kit "
strings:
$a= "$formproc_obj"
$b= "$data_email_sender"
$c= "$validator"
$d= "/templ/wells_email_subj.txt"
condition:
all of them
}