email_list in www.cisco.com

On 2019-01-26T06:35:15.866812+00:00 we found suspicious pattern email_list, type: Suspicious, (Large concentration of email addresses may indicate a data leak) in the page https://www.cisco.com/web/fw/oneid/acce… referenced from https://mktcs.cloudapps.cisco.com/ .

The suspicious code sample:

b'id-only@cisco.com' … b'-only@cisco.com' … b'only@cisco.com' … b'masridha@cisco.com' … b'web-help@cisco.com' … b'-help@cisco.com' … b'help@cisco.com' … b'web-help@cisco.com' … b'-help@cisco.com' … b'help@cisco.com' … b'web-help@cisco.com' … b'-help@cisco.com' … b'help@cisco.com' … b'web-help@cisco.com' … b'-help@cisco.com' … b'help@cisco.com' … b'web-help@cisco.com' … b'-help@cisco.com' … b'help@cisco.com' … b'web-help@cisco.com' … b'-help@cisco.com' … b'help@cisco.com' … b'web-help@cisco.com' … b'-help@cisco.com' … b'help@cisco.com' … b'web-help@cisco.com' … b'-help@cisco.com' … b'help@cisco.com' … b'cpr-ops@cisco.com' … b'-ops@cisco.com' … b'ops@cisco.com'

This feature is experimental so please feel free to contact us if you feel any of the reported issues is a false positive or you want to suggest a pattern that should be detected (we are using Yara standard).

Fully automated RESTful API is now available. Subscribe for your free trial today!