February Campaigns

Date,Summary ,Details,Email,Payload,Type,Users Targeted
2/1/2018,Malicious email campaign; morning,"New incoming fax from <digits>"; link -> doc -> hancitor -> pony -> evilpony -> pandabanker trojans, Link, 259
2/1/2018,Malicious email campaign; morning,"SWIFT PAYMENT"; jar -> adwind -> qrat, Attachment, 27
2/4/2018,Malicious email campaign; morning,"FW: RFQ - PURCHASE - OLYSTAR DENZO"; jar -> qrat continued into 2/5, Attachment, 9
2/5/2018,Malicious email campaign; morning,"UPDATED HUD"; jar -> adwind -> qrat, Attachment, 4
2/5/2018,Malicious email campaign; evening,All subjects contain "invoice"; link -> doc -> emotet, Link, 400
2/5/2018,Malicious email campaign; evening,"Request for Quotation"; xls -> lokibot, Attachment, 22
2/6/2018,Malicious email campaign; morning,"Deposit for acn090462|WSF Credit Advice|Deposit Copy|Anti-Money Laundering Council Resolution"; zip -> jar -> qrat, Attachment, 218
2/15/2018,Malicious email campaign; morning,"WIRE TRANSFER"; ace -> lockibot continued into 2/20, Attachment, 99
2/16/2018,Malicious email campaign; morning,"FUND TRANSFER ADVICE|Commission Credit Confirmation|Invoice-002"; zip -> jar -> qrat, Attachment, 170
2/20/2018,Malicious email campaign; morning,Subjects contain "invoice", link -> doc -> emotet, Link, 365
2/21/2018,Malicious email campaign; morning,Subjects contain "fattura|fatture" xls -> pandabanker, Attachment, 5
2/21/2018,Malicious email campaign; morning,"New order"; rar -> exe -> agenttesla, Attachment, 4
2/21/2018,Malicious email campaign; morning,"URGENT PURCHASE ORDER"; rar -> lokibot, Attachment, 2
2/22/2018,Malicious email campaign; morning,All subjects contain "2月度発注書送付"; xls -> ursnif, Attachment, 14
2/23/2018,Malicious email campaign; morning,"ORDER NEEDED URGENTLY"; rar -> formbook, Attachment, 14
2/23/2018,Malicious email campaign; morning,"Anti-Money Laundering Council Resolution"; zip -> jar -> qrat, Attachment, 16
2/26/2018,Malicious email campaign; morning,"Existing WU Agent Form|Duplicated USD payment|MoneyGram Funding Advice"; zip -> jar -> qrat, Attachment, 64