ET MALWARE Win32/Phorpiex Template 8 Active - Outbound Malicious Email Spam

alert smtp $HOME_NET any -> $EXTERNAL_NET any (
    msg:"ET MALWARE Win32/Phorpiex Template 8 Active - Outbound Malicious Email Spam";
    flow:established,to_server;
    content:"Subject|3a 20|I|20|RECORDED|20|YOU!"; fast_pattern;
    content:"there|20|are|20|some|20|bad|20|news";
    content:"My|20|trojan|20|allows|20|me";
    content:"All|20|you|20|need|20|is|20|$";
    threshold:type limit, count 1, seconds 60, track by_src;
    classtype:trojan-activity;
    sid:2044126; rev:3;
    metadata:attack_target Client_Endpoint, created_at 2023_02_04, deployment Perimeter, malware_family Win32_Phorpiex, performance_impact Low, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2023_04_07;
)