ANZ Bank phish running on susanadieta[.]com

Found: 2018-01-05 11:30:04.958000
URL: http://susanadieta.com/wp-includes/anzau.zip
File: susanadieta.com-wp-includes-anzau.zip
Domain: susanadieta.com
Target: ANZ Bank
Name                                               Size Date                 MD5                                anzau/anzau/blocker.php                             2644 2016-06-22 20:00:08  5aa3f3f406ced12d0bc7742e77b01781
    File appears in 196 kits  and under 4 different file names
anzau/anzau/home/anz.htm                           16808 2018-01-04 13:54:36  8f042636a2e8d3237d32bd58191c074f
anzau/anzau/home/anz.php                             614 2018-01-05 16:34:18  737af8441dd7862cc8d413452dad750e
anzau/anzau/home/anzqa.php                          1019 2018-01-05 16:34:30  9c9843839ccd7dd512332d40df90586b
anzau/anzau/home/securityverification.htm          53747 2018-01-04 14:07:38  f3e147cc6e0600f015ba5a6f011af76d
anzau/anzau/index.php                                619 2016-06-22 20:00:08  dc1b67a93b1aed2fdc965128a0185acf
    File appears in 63 kits

2 Email addresses found:
    dp938386@gmail.com
    logs@support.nz



https://texasmalwareblog.blogspot.com   @phish_total