The new .plug-and-play. phishing kit reduces the time and effort required of the fraudster by automating the site installation process. The kit is a single PHP code file, which is run on the compromised server once, and automatically creates the relevant directories and installs all of the files associated with the specific phishing site. The attack was used multiple times to attack the same financial institution. Financial Institutions Warned New Fast Phishing Kit Found”]
Source: https://www.bankinfosecurity.com/financial-institutions-warned-new-fast-phishing-kit-found-a-499