Sneed-Reactivity/yara-mikesxrs/phish me/criakl_metadata.yar
Sam Sneed 08e8d462fe OMG ISTG PLS WORK
RED PILL 🔴 💊
2024-07-25 12:43:35 -05:00

16 lines
No EOL
295 B
Text

/*
Description: Rule looking for Russian meta content tags
Author: iHeartMalware
Priority: 3
Scope: Against Email
Tags:
Created in PhishMe Triage on March 11, 2016 3:04 PM
*/
rule criakl_russian_meta_content
{
strings:
$h1="<meta content=\"ru\"" nocase
condition:
all of them
}