Phishing Landing Page Serving Fabricated '4.8-Star, 2M Users' Social Proof
This rule monitors network HTTP header traffic for specific strings commonly associated with social engineering, scamming, or phishing campaigns, such as '4.8-star' ratings or 'over 2 million users' claims, which are often used to deceive users into interacting with malicious content.
Cortex XDR
