KRIXKONTROL - Phishing Kit Author

#KRIXKontrol #PhishingKitAuthor #phishing #phishingkit

@ActorExpose documented a phishing kit that looked very dis-organized, had a backup php.txt file, an empty sub-folder, mispspelled the word electronics, and only distinguishing was the text KRIXKONTROL.

folder structure
\futa.swf
\home.php
\index.jpg
\indexincorrect.php.txt
\layout.css
\viewmyorder.htm
\electronices.jpg   (notice it is spelled wrong with 'es' at end)

\home.php contains text
+++++++++++KRIXKONTROL++++++++++

example 1:
md5 97c1f6b23bdba060f53eed76f54eee15
https://www.virustotal.com/gui/file/8db025ff54871784ae42465635de6ab8fe26363c59df6f876655f7842cb71b97/community
hxxps://bankofbuddha[.]ga/orderpurchase/

reference
https://twitter.com/ActorExpose/status/1133712675995824129