Doc Preview - Phishing Kit Type

#DocPreview #FudPages #PhishingKitType #phishing #phishingkit

@ActorExpose documented a phishing kit that fakes generating a document preview to steal your credentials. It is made by #FudPages as seen in the \next.php file again

|----------- FUDPAGES [.] RU --------------|

folder structure
\bizmail.php
\index.php
\next.php
\remove.php
\wait.php
\img\
\css\

example 1:
md5 889923c97a23cd4ef48c153c9c2ad294
https://www.virustotal.com/#/file/c21e0c9dc809b312c63d18cd73b5d1745fb2c2068437f2a9766c0541b9289556/detection
hxxp://thirtieth-shift[.]000webhostapp[.]com/

References
https://twitter.com/ActorExpose/status/1133099864340992000