Update http/miscellaneous/balada-injector-malware.yaml

Co-authored-by: msm-cert <156842376+msm-cert@users.noreply.github.com>
2024-01-23 15:51:02 +01:00 · 2024-01-23 15:51:02 +01:00 · c1f23c2dcd
parent c5fc786539
commit c1f23c2dcd
1 changed files with 1 additions and 1 deletions
--- a/http/miscellaneous/balada-injector-malware.yaml
+++ b/http/miscellaneous/balada-injector-malware.yaml
@ -24,7 +24,7 @@ http:
      - type: regex
        part: body
        regex:
-          - '(?mi)sgpbWillOpen", function\(e\) {if \(e.detail.popupId.{0,100}eval.{0,100}atob'
+          - '(?mi)sgpbWillOpen", *function\(e\) *{if *\(e[.]detail[.]popupId.{0,100}eval.{0,100}atob'

      - type: word
        part: header