Danish researchers say they traced a cybercriminal s tracks through a series of proxies, compromised web servers, and poorly secured routers. The suspect hasn t been apprehended yet, but could be behind a larger campaign, they said. The attacker uses a phishing kit that drives the email attacks is commercially available online and very simple and straightforward, according to researchers Peter Kruse and Jan Kaastrup. They found a file, CACAT, containing links to more than 1,000 hacked servers, a list of targets, and spam templates.
Source: https://threatpost.com/details-around-romanian-phishing-kit-creator-campaign-revealed/124777/