diff --git a/detection-rules/impersonation_chrome_web_store_policy.yml b/detection-rules/impersonation_chrome_web_store_policy.yml
index 068c6abb7fa..a54dda2abff 100644
--- a/detection-rules/impersonation_chrome_web_store_policy.yml
+++ b/detection-rules/impersonation_chrome_web_store_policy.yml
@@ -32,7 +32,6 @@ source: |
or strings.icontains(body.html.raw,
'
'
)
- or strings.icount(body.html.display_text, 'Chrome Web Store') >= 3
or regex.icontains(body.html.display_text,
'Item name: [^\s]+ security extension'
)
@@ -76,4 +75,4 @@ detection_methods:
- "URL analysis"
id: "4a98f283-8cc6-5864-bafb-e1908d0a5a8b"
testing_pr: 2255
-testing_sha: 2053bcf7ff5c688996ca2d8eea98314e05a2d721
+testing_sha: ba363c8f980ad5d7cfaf33985a98a7c5ed7f99cd