sublime-rules icon indicating copy to clipboard operation
sublime-rules copied to clipboard

Published 20 hours ago • verified publisher icon sublime-security

Create headers_mailer_contains_hidden_content.yml

Open D-Bolton opened this issue 1 month ago • 0 comments

Description

Detects messages sent via Microsoft CDO for Windows 2000 or PHPMailer that contain HTML paragraph elements with transparent text or hidden content styling, commonly used to evade content analysis.

Associated samples

Associated hunts

D-Bolton avatar Nov 04 '25 18:11 D-Bolton