Marcus Greenwood (Founder of UB.IO) put out some good analysis of this at https://medium.com/the-automator/so-about-that-ba-hack-a82e5...
And there's more analysis at http://huagati.blogspot.com/2018/05/things-you-probably-dont...
And the fake BAWAYs server is still up - https://twitter.com/inventur_es/status/1039519364733497344