Adobe phish running on joshcorbat[.]com

Found: 2018-03-16 06:18:43.282000
URL: http://joshcorbat.com/product/pdf_new.zip
File: joshcorbat.com-product-pdf_new.zip
Domain: joshcorbat.com
Target: Adobe
Name                                               Size Date                 MD5                                pdf_new/pdf_new/a-logo.png                         10206 2017-08-25 17:56:54  c30ec35fcdcb3954cd2055b006d459ac
pdf_new/pdf_new/geoplugin.class.php                 4647 2017-07-28 19:03:06  c8ea1e960b48a620c00bc65d525a721c
    File appears in 1245 kits  and under 3 different file names
pdf_new/pdf_new/index.html                          1289 2017-08-25 18:29:56  69abd0e3e78fcf48f13028c5f31fcf4b
pdf_new/pdf_new/login.php                           1188 2018-03-14 18:36:26  048f44b0d3e4d0e09e77637efe1035b1
pdf_new/pdf_new/pdf.jpg                            14878 2017-08-25 17:56:56  378bda71f580154aaa310cd63ec3740c

2 Email addresses found:
    gp_support@geoplugin.com (appears in 1173 kits)
    ismytime2shine2017@gmail.com



https://texasmalwareblog.blogspot.com   @phish_total