MICROSOFT phish running on theautismhandbook[.]com

Found: 2018-06-03 17:15:23.908000
URL: http://www.theautismhandbook.com/wordpress/wp-content/plugins/ubh/office.zip
File: www.theautismhandbook.com-ubh-office.zip
Domain: theautismhandbook.com
Target: MICROSOFT
Name                                               Size Date                 MD5                                office/office/index.htm                            17593 2017-11-25 17:07:28  c02d1d743d742a0e6321b83237e2fd36
    File appears in 15 kits
office/office/index2.htm                           19997 2017-11-25 17:07:28  e232cd1c27fe00af1458dc24ed9b7031
    File appears in 15 kits  and under 2 different file names
office/office/index2.php                           19997 2017-11-25 17:07:28  e232cd1c27fe00af1458dc24ed9b7031
    File appears in 15 kits  and under 2 different file names
office/office/info.php                               738 2018-04-25 11:27:52  44dfdef773446850d8192d6c4f0d40cf
office/office/thankyou.htm                         14317 2017-11-27 14:21:32  2ef65ddc39ff6959b99bc0d84624015a
    File appears in 14 kits

3 Email addresses found:
    cfoexecutivemail@gmail.com
    info@lol.com (appears in 14 kits)
    info@lol.combla-emailadd-bla (appears in 14 kits)



https://texasmalwareblog.blogspot.com   @phish_total