deathbysnoosnoo

I found some php files in a customers directory and when executed I see the title of the one program is 'WHMCS Killer V3'. After browsing around it is clear it's intent is to extract every bit of customer data and other malicious things. Has this ever been seen in the wild before? I can take screenshots and provide the code if someone is so inclined to look at it.