heroui logo

Service abuse: GetAccept callback scam content

Sublime Rules

View Source
Summary
This rule aims to detect potential abuse of the GetAccept service by identifying callback scam messages in communications that utilize its infrastructure. The detection focuses on messages that are sent from the legitimate GetAccept domain (getaccept.com), applying content analysis and natural language understanding to flag messages that may impersonate legitimate callbacks for fraudulent solicitation. Specifically, the rule triggers when the natural language understanding classifier identifies intents associated with "callback_scam" within the text of the message. Given its operation, the rule is relevant for identifying social engineering tactics that exploit trusted communication channels, thus serving as a protective measure against callback phishing attacks.
Categories
  • Web
  • Application
  • Identity Management
Data Sources
  • Service
  • User Account
  • Application Log
  • Network Traffic
Created: 2026-01-17