Home / malwarePDF  

PWS:HTML/Phish.HP


First posted on 17 March 2016.
Source: Microsoft

Aliases :

There are no other names known for PWS:HTML/Phish.HP.

Explanation :

The phishing page is an HTML page that is usually hosted on compromised or malicious websites or sent through email, either as an attachment or in the form of a link.

Alternatively, a visit to a compromised or malicious website can be used to redirect you to a website that hosts phishing pages.

In the wild, we have observed the following example webpages:



The information that it tries to get includes the following:

  • Google account email ID
  • Google account password


If you click "submit" or "update" or a similar button after filling out the form, the information is sent to a remote server. We have observed the information being sent to the following URLs using HTTP POST, which is a type of basic Internet data communication:


  • bricksacademy-ng.com/countryess.php





Analysis by Mihai Calota

Last update 17 March 2016

 

TOP

Malware :

Family: