sublime-rules icon indicating copy to clipboard operation
sublime-rules copied to clipboard

Published 20 hours ago • verified publisher icon sublime-security

Create impersonation_charter_spectrum.yml

Open ben-sublime opened this issue 3 months ago • 2 comments

Description

Detects messages impersonating Charter Spectrum by using variations of 'Spectrum' or 'MyCharter' in the display name while not originating from legitimate Charter domains or failing DMARC authentication.

Associated samples

Associated hunts

  • Updated Hunt 8/21: https://platform.sublime.security/messages/hunt?huntId=0198ccd6-e1ee-778e-991d-8e1e5753413b

ben-sublime avatar Aug 12 '25 13:08 ben-sublime

/update-test-rules

MSAdministrator avatar Sep 15 '25 16:09 MSAdministrator

/update-test-rules

zoomequipd avatar Sep 20 '25 00:09 zoomequipd