2018-11-12 #phishingkit actor emails 103.75.189.106

#phishingkit actor emails
https://twitter.com/Techhelplistcom/status/1061845780791726081
103.75.189.106 vpsmalaysia[.]com[.]my hosting


amiro\includes\my_email.php:$my_email = "madauthy@protonmail.com";
Excel23\next.php:$send = "paulm.petromin@gmail.com";
HotmailOfficeNew\next.php:$send = "paulm.petromin@gmail.com";
microsoftonline.secured\m1soft\verify.php:$mail_to = "feminist008@gmail.com";
NAVER\oku.php:$send = "ddonwise1010@yandex.com, maria.hirschberghof@gmail.com";
office365\next.php:$send = "anny.duweivices@gmail.com";
wetransfers\next.php:$send = "anny.duweivices@gmail.com";



http://chowusi.com/download/OUTLOOKNEW.zip
http://batwoks.com/test/test_files.zip
http://swealsk.com/11/NAVER.zip
http://swealsk.com/13/NAVER.zip
http://swealsk.com/6/NAVER.zip
http://swealsk.com/10/NAVER.zip
http://swealsk.com/7/NAVER.zip
http://swealsk.com/8/NAVER.zip
http://swealsk.com/2/NAVER.zip
http://swealsk.com/5/NAVER.zip
http://swealsk.com/9/NAVER.zip
http://swealsk.com/3/NAVER.zip
http://swealsk.com/12/NAVER.zip
http://swealsk.com/1/NAVER.zip
http://swealsk.com/4/NAVER.zip
http://bahlowk.com/amiro.zip
http://ualkws.com/microsoftonline.secured.zip
http://gaklosk.com/microsoftonline.secured.zip
http://ouiask.com/HotmailOfficeNew.zip
http://ouiask.com/office365.zip
http://ouiask.com/Excel23.zip
http://ouiask.com/wetransfers.zip