svn commit: r1927559 - spamassassin/trunk/rulesrc/sandbox/jhardin
| Newsgroups | gmane.mail.spam.spamassassin.cvs |
|---|---|
| Message-ID | <175401323505.3852296.9779703240418315657@svn02-us-east.apache.org> |
Author: jhardin Date: Fri Aug 1 01:53:54 2025 New Revision: 1927559 Log: phishing exfil rule for evaluation Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf ============================================================================== --- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Fri Aug 1 01:24:13 2025 (r1927558) +++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Fri Aug 1 01:53:54 2025 (r1927559) @@ -4445,4 +4445,8 @@ describe URI_DOTCN_LOGIN L tflags URI_DOTCN_LOGIN publish +# seen in phishing emails for captured data exfil +uri __TELEGRAM_MESSAGE m;^https?://api\.telegram\.org/bot[^/]+/sendMessage;i + +