From f2f048999ee5cb3ce0cf85a1bc5ee1837d279480 Mon Sep 17 00:00:00 2001 From: Vsevolod Stakhov Date: Mon, 12 Nov 2018 11:16:58 +0000 Subject: [Rules] Reduce FP rate for LEAKE_PASSWORD_SCAM rule --- rules/regexp/misc.lua | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'rules/regexp') diff --git a/rules/regexp/misc.lua b/rules/regexp/misc.lua index 846cb5ee5..7df011320 100644 --- a/rules/regexp/misc.lua +++ b/rules/regexp/misc.lua @@ -63,7 +63,7 @@ reconf['HAS_ONION_URI'] = { local password_in_subject = [[Subject=/\bpassword\b/i]] local password_in_body = [[/\bpassword\b/i{sa_body}]] -local btc_wallet = [[/\b[13][0-9a-zA-Z]{25,34}\b/{sa_body}]] +local btc_wallet = [[/^[13][0-9a-zA-Z]{25,34}$/{words}]] reconf['LEAKED_PASSWORD_SCAM'] = { re = string.format('(%s | %s) & %s', password_in_subject, -- cgit v1.2.3