Medium Severity
Brand impersonation: Silicon Valley Bank
Description
Detects emails that impersonate Silicon Valley Bank
References
No references.
Sublime Security
Created Aug 17th, 2023 • Last updated Apr 25th, 2024
Feed Source
Sublime Core Feed
Source
type.inbound
and (
regex.icontains(sender.email.domain.domain, "(silicon(e)?.{0,10}(valley|bank)|svb)")
or strings.ilevenshtein(sender.display_name, 'svb') <= 1
)
and network.whois(sender.email.domain).days_old <= 30
Playground
Test against your own EMLs or sample data.