*.000webhostapp.com

Phishing C&C Exfiltration Download

Attackers can use *.000webhostapp.com to host phishing websites.

Attackers have used *.000webhostapp.com domains for C&C purposes.

Attackers can exfiltrate files onto *.000webhostapp.com via file manager capabilities.

Malicious tools can be stored on *.000webhostapp.com and downloaded when required.

https://www.joesandbox.com/analysis/339155/0/html