AT&T phish ** running on consultwinstra[.]com

Found: 2018-02-19 14:25:46.886000
URL: http://consultwinstra.com/att.zip
File: consultwinstra.com-foo-att.zip
Domain: consultwinstra.com
Target: AT&T
Name                                               Size Date                 MD5                                cli/update_cron.php                                 2141 2014-12-10 07:40:08  aa3c4640d97b191a54d4b70b6e22ef2b
cli/cc/Team.php                                      757 2017-09-26 20:19:36  7b29be8ee6ee5f7ce2008ec6ea9fc5b5
cli/cc/Indexxatt.htm                                4145 2017-09-26 20:18:40  4f489ae406d011945bc190aa844d2134
    File appears in 3 kits
cli/j2xml.php                                       6195 2016-09-19 10:35:56  e8016b2bb0f954c79d938bcd2989f4a0
cli/finder_indexer.php                             10103 2014-12-10 07:40:08  8d604018f42341a0b91b7cf66cf38a6e
cli/index.html                                        31 2014-12-10 07:40:08  8ca096fda23d564fe62bc65ef5f498e0
cli/garbagecron.php                                 1288 2014-12-10 07:40:08  86ca242db6d64f767043038950c9edc4

2 Email addresses found:
    legely31@gmail.com
    info@eshiol.it



https://texasmalwareblog.blogspot.com   @phish_total