GS Mafia - Phishing Kit Author

#GSMafia #PhishingKitAuthor #phishing #phishingkit

@Jouliok documented a Paypal phishing kit called GS. Mafia which is pretty easy to spot because most of the php file names start with "gs_"

folder structure
\gs_gen\
\home\gs_accessmail.php
\home\gs_cc.php
\home\gs_success.php
\home\js\gs_bill.js
\home\settings\gs_config.php   (says GS. Mafia in it)

example 1:
https://github.com/JoulioK/Phishing_Kits/blob/master/verification-account-service.id.bhrc.co.uk/ww-4.zip


References
https://twitter.com/Jouliok/status/1133064942972747776