WEBMAIL phish running on globalweb.asia

Found: 2017-11-21 21:16:15.497000
URL: http://globalweb.asia/upgradepage.zip
File: globalweb.asia-foo-upgradepage.zip
Domain: globalweb.asia
Target: WEBMAIL
Name                                               Size Date                 MD5                                upgradepage/upgradepage/Aldomain/mailbox/domain/index.php  1711 2017-09-26 04:00:06  23db7cd85ffbc24c981d84091ed86191
    File appears in 12 kits
upgradepage/upgradepage/Aldomain/mailbox/domain/post.php  1110 2017-09-20 02:49:46  65123ed65c34d205ef047ab43d87570c
    File appears in 2 kits
upgradepage/upgradepage/Aldomain/mailbox/domain/thankyou.php  4233 2017-09-27 17:58:30  f757821cfbbed57c03cd71fe7a9176b0
    File appears in 3 kits

1 Email addresses found:
    nwaghana24209840@gmail.com (appears in 2 kits)



https://texasmalwareblog.blogspot.com   @phish_total