Phishing Email Requesting Sensitive Information

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•1

This rule detects potential phishing emails sent over SMTP that request sensitive information. It looks for specific keywords in the email subject and content, such as "verify", "account", and "click here", indicating an attempt to trick the recipient into revealing credentials or other sensitive data.