sublime-rules icon indicating copy to clipboard operation
sublime-rules copied to clipboard

Published 20 hours ago • verified publisher icon sublime-security

Create brand_impersonation_xfinity.yml

Open markmsublime opened this issue 1 month ago • 0 comments

Description

Detects messages impersonating Xfinity or Comcast through subject lines, display names, or body content that contains credential theft or advance fee fraud indicators, while excluding legitimate communications from verified Comcast domains.

Associated hunts

markmsublime avatar Oct 07 '25 18:10 markmsublime