From cde05e7eb99233792e2715a9d894e34988fda8ec Mon Sep 17 00:00:00 2001
From: idontusesgithub <97984982+idontusesgithub@users.noreply.github.com>
Date: Sun, 23 Jan 2022 12:31:07 +0300
Subject: [PATCH] Current phishing prefixes

See also: https://www.kaspersky.com/blog/instagram-hijack-new-wave/25997/
---
 suspicious.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/suspicious.yaml b/suspicious.yaml
index cb2af79..6bb83f2 100644
--- a/suspicious.yaml
+++ b/suspicious.yaml
@@ -69,6 +69,15 @@ keywords:
     'flickr': 60
     'whatsapp': 60
 
+# Instagram
+    'verified':60
+    'telifhakki':60
+    'copyright-support': 60
+    'ihlali':60
+    'copyright':60
+    'verified-badge':60
+    'account-support':60
+    
 # Cryptocurrency
     'localbitcoin': 70
     'poloniex': 60