[SignatureBot] Add or update signature nucleitemplates_wasabi-bucket-takeover.yml

baddns/signatures/nucleitemplates_wasabi-bucket-takeover.yml

@@ -0,0 +1,24 @@
+identifiers:
+  cnames:
+  - type: word
+    value: wasabisys.com
+  ips: []
+  nameservers: []
+  not_cnames: []
+matcher_rule:
+  matchers:
+  - condition: and
+    dsl:
+    - Host != ip
+    - contains(tolower(header), "wasabis3")
+    type: dsl
+  - condition: and
+    part: body
+    type: word
+    words:
+    - The specified bucket does not exist
+    - BucketName
+  matchers-condition: and
+mode: http
+service_name: wasabi Bucket Takeover - Detection
+source: nucleitemplates

baddns/signatures/signature_history.txt

@@ -113,3 +113,4 @@ e155aed36a19a0437650f5d1033a64a47f39a8981de9f1b5f39e2dfe7e14996d #nucleitemplate
 ad913111f8c498e0e5b0ef30714e6074832914e936f61c4dd3b10dad2dd9e436 #dnsreaper_surveysparrow.yml
 9075b7665514a4ed5e342152a2f80c804959bb5ee5f94c1e8dfdb50858e969bd #dnsreaper_wix.yml
 d3ec2dfaec7ac79042848aee837c2391958e46e2c7824dedb6a9590939d25f44 #dnsreaper_simplebooklet.yml
+ab314bbf1d879ea9ada35b4ca6735663c209d481a359426a2bec478a53ea4833 #nucleitemplates_wasabi-bucket-takeover.yml