WELLS FARGO phish ** running on alphabroker[.]com[.]au

Found: 2018-01-13 08:16:10.724000
URL: http://alphabroker.com.au/wellsneh.zip
File: alphabroker.com.au-foo-wellsneh.zip
Domain: alphabroker.com.au
Target: WELLS FARGO
Name                                               Size Date                 MD5                                wellsneh/wellsneh/clr.php                            768 2017-11-27 18:39:28  f39a687f8cbcf974c15498396dcbec04
wellsneh/wellsneh/indexxx.htm                      47618 2017-11-13 12:07:26  548c38e4bd4cf86139f9386dca6c8e1c
wellsneh/wellsneh/login.php                         1238 2017-12-13 08:34:06  5f0247c2e83615bfbffb41e87c45d989
wellsneh/wellsneh/questionreviews.htm               7630 2017-11-13 12:16:22  527755b65e629ae0c235e608cf56df3d
wellsneh/wellsneh/redire.htm                        2560 2015-07-14 14:07:58  b1eb7d438a1227eb7a6599e4c46322ae
wellsneh/wellsneh/signon.htm                       10678 2015-06-23 21:57:00  b0abad44701e6704413f4a5223e271c4

3 Email addresses found:
    folii2018@zoho.com
    folii2019@yahoo.com
    wells@wells.com



https://texasmalwareblog.blogspot.com   @phish_total