dYgRDqmT

1(1)giniajaterus.usa.cc/db/invoince.html
2next
3(2)giniajaterus.usa.cc/db/listbank.html
4berisi 10 list logo bank + 1 custom bank
5(3)if click wells bank logo
6visited to giniajaterus.usa.cc/db/wells-landingpage.html
7(3.1)if click BOA logo
8visited to giniajaterus.usa.cc/db/BOA-landingpage.html
9(3.2)if click chase bank logo
10visited to giniajaterus.usa.cc/db/chase-landingpage.html
11etc...
12
13landing-page tu sejenis alert yg mengharuskan user mengkonfirmasi email login terlebih dahulu sebelum mereka mengkonfirmasi bank account.
14
15misal user mau ke landingpage tiba2 di layar background blank abu abu terus muncul dialog js atau apalah tu seperti di poin 4 di bawah.
16
17(4) sweet alert js
18
19https://i.pinimg.com/originals/5f/f2/fd/5ff2fd003580f94f25c9b98cf987421d.jpg
20
21Oops...
22Something went wrong!
23Unfortunately, This device ip was reset. To continue, sign in with your bank account, you must confirm your own email account that is connected to your bank account.
24
25dibawah tulisan atas itu ada button OK seperti di ss
26
27then klik OK button.
28
29(4.1)
30
31sehabis klik OK di replace dengan dialog baru pake pop up lama aja.
32tp munculnya seperti alert jg mirip yg sweet alert gituh.
33
34https://i.stack.imgur.com/QBfXc.jpg
35
36Log In to Continue = huruf besar seperti di ss
37pake pop up yg lama cmn di atas nya di kasih tulisan "Log In to Continue"
38dibawahnya lg "login with your own bank email account"
39dibawahnya sama kek yg lama masih logo2 email.
40
41(5)
42if clik logo gmail ya redirek ke example gmail.com/scam.html
43
44(5.1)
45nah di setiap scam gmail/yahoo/aol/hotfams dll
46ada file akhir semisal sukses.html
47biasanya itu berisi redirek ke official real email gmail.com gitu
48nah di ubah jd redirek ke scam bank kita,
49di awal kan dia pilih misal wells fargo
50terus ke landing page
51terus muncul dialog alert ya sejenis pop up
52di OK in
53next ke konfirmasi email misal select gmail
54ke scam gmail
55di sukses.html redirek ke bank awal wells fargo ke step1 nya atau login awal.
56
57artinya setiap logo bank di bank.html saat di klik akan redirek ke landingpage masing2
58bank logo > if select wells > go to landingpage-wells > email-scam > sukses.html > redirect to wells scam.