nuclei-templates/http/vulnerabilities/ransomware/deadbolt-ransomware.yaml

20 lines
340 B
YAML
Raw Normal View History

2022-01-28 10:34:06 +00:00
id: deadbolt-ransomware
info:
name: Deadbolt Ransomware Detection
author: pdteam
severity: info
tags: ransomware,deadbolt
metadata:
max-request: 1
2022-01-28 10:34:06 +00:00
http:
2022-01-28 10:34:06 +00:00
- method: GET
path:
- "{{BaseURL}}"
matchers:
- type: word
words:
- "<title>ALL YOUR FILES HAVE BEEN LOCKED BY DEADBOLT.</title>"