From eea2b46b1d896f518cd2b51f6512d58806f737e0 Mon Sep 17 00:00:00 2001 From: Vsevolod Stakhov Date: Mon, 21 Jan 2019 13:43:32 +0000 Subject: [PATCH] [Rules] Add more defs for LEAKED_PASSWORD_SPAM --- rules/regexp/misc.lua | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/rules/regexp/misc.lua b/rules/regexp/misc.lua index 56e63cd7b..aaf8425bd 100644 --- a/rules/regexp/misc.lua +++ b/rules/regexp/misc.lua @@ -61,14 +61,18 @@ reconf['HAS_ONION_URI'] = { group = 'experimental' } +local my_victim = [[/(?:victim|prey)/{words}]] +local your_webcam = [[/webcam/{words}]] +local your_onan = [[/(?:mast[ur]{2}bati(?:on|ng)|onanism|solitary)/{words}]] local password_in_words = [[/^pass(?:(?:word)|(?:phrase))/i{words}]] local btc_wallet_address = [[/^[13][0-9a-zA-Z]{25,34}$/{words}]] -local wallet_word = [[/^wallet$/i{words}]] +local wallet_word = [[/^wallet$/{words}]] local broken_unicode = [[has_flag(bad_unicode)]] reconf['LEAKED_PASSWORD_SCAM'] = { - re = string.format('%s & (%s | %s | %s | lua:check_data_images)', - btc_wallet_address, password_in_words, wallet_word, broken_unicode), + re = string.format('%s & (%s | %s | %s | %s | %s | %s | lua:check_data_images)', + btc_wallet_address, password_in_words, wallet_word, + my_victim, your_webcam, your_onan, broken_unicode), description = 'Contains password word and BTC wallet address', functions = { check_data_images = function(task) -- 2.39.5