WELLS FARGO phish running on ewu[.]ae

Found: 2018-03-27 15:05:51.155000
URL: https://ewu.ae/men/wellsfargo.zip
File: ewu.ae-men-wellsfargo.zip
Domain: ewu.ae
Target: WELLS FARGO
Name                                               Size Date                 MD5                                wellsfargo/wellsfargo/identity.php                 12228 2015-06-02 22:51:48  d0cf498a1f292830b058ff398c5db64d
wellsfargo/wellsfargo/index.html                   42097 2015-06-02 22:48:34  2f8d4cd24891daa9fb112479191c1f5e
wellsfargo/wellsfargo/verify.php                    1642 2013-06-20 12:29:02  e0599b547702e4dcb90c63e07a3cb743
    File appears in 27 kits  and under 2 different file names
wellsfargo/wellsfargo/vinz.php                       856 2015-10-19 14:27:02  44df0effbd1a871fb495aa52bf459381
wellsfargo/wellsfargo/vinzi.php                      507 2015-10-19 14:27:14  cdd392454328de9488742757cb0cc6d7

1 Email addresses found:
    info.private@utpriv-service.hol.es



https://texasmalwareblog.blogspot.com   @phish_total