October Campaigns

Date,Details,Email Payload Type,Users Targeted
10/1/2018,"All subjects contain ""eFax""; link -> doc -> hancitor -> pony -> evilpony -> pandabanker",Link,5120
10/2/2018,"""FW:RE: AWB & INVOICE 02.10.2018""; r00 -> agenttesla",Attachment,4
10/2/2018,"All subjects contain ""Onlineinvoices""; link -> doc -> hancitor -> pony -> evilpony -> pandabanker",Link,6054
10/2/2018,"""FW: SHIPMENTS""; 2 zip files -> formbook continued into 10/7",Attachment,41
10/2/2018,"""Secure Message""; html -> doc -> trickbot",Attachment,27
10/2/2018,"""RV: AW:Custom Docs""; doc -> formbook continued into 10/7",Attachment,63
10/3/2018,"All subjects contain ""shipment|package|DHL""; link -> doc -> hancitor -> pony -> evilpony -> pandabanker",Link,5727
10/3/2018,"""Reference: BACS09280981""; xls -> trickbot",Attachment,2
10/3/2018,"""Loading confirmation : TCLU1045517 (BL :CNT0160828)""; doc -> link -> formbook continued into 10/4",Attachment,6
10/4/2018,All subjects highjacked -> doc -> ursnsif,Attachment,4
10/4/2018,"""BL & PARKING LIST""; zip -> formbook continued into 10/9",Attachment,36
10/5/2018,"""New fax message""; doc -> trickbot",Attachment,5
10/5/2018,"""Application""; doc -> nymaim",Attachment,25
10/9/2018,"""SHIPMENT ADVICE/BL DRAFT""; doc -> hawkeye keylogger",Attachment,18
10/9/2018,"All subjects contain ""UPS""; link -> doc -> hancitor -> pony -> evilpony -> pandabanker",Link,6630
10/10/2018,"All subjects contain ""IRS|Internal Revenue Service""; link -> doc -> hancitor -> pony -> evilpony -> pandabanker",Link,4368
10/10/2018,"""REG OUR MT103 DD 09.10.2018""; arj (rar) -> lokibot continued into 10/12",Attachment,11
10/12/2018,"""Urgent - Conflicting Emails and Quote""; pdf -> link -> zip -> agenttesla",Attachment,2
10/15/2018,"""ACH PAYMENT REPORT ATTACHED DELIVERED(15/10/2018)""; iso -> formbook",Attachment,11
10/15/2018,"""New Order""; doc -> bitly -> 404 :(",Attachment,3
10/15/2018,"""NEW ORDER #PO 47583 RFQ 72421""; iso -> formbook",Attachment,2
10/16/2018,"""<<<<Suspicious Transaction From Foreign 1p Address>>>>""; docx -> lokibot",Attachment,5
10/16/2018,"""SHIPMENT ADVISORY""; rar  -> formbook",Attachment,3
10/16/2018,"""Invoice for <digits>. 10/08/2018""; doc -> flawedammy rat coninued into 10/17",Attachment,9514
10/17/2018,"All subjects contain ""DocuSign""; link -> doc -> hancitor -> pony -> evilpony -> pandabanker",Link,5498
10/19/2018,"""Accounts Payable Direct Deposit Advice"".; doc -> formbook continued into 10/22",Attachment,86
10/19/2018,"""Payment Advice/Avis de paiement""; doc -> formbook",Attachment,8
10/20/2018,"""shipping document""; doc -> lokibot",Attachment,4
10/21/2018,"""Invoice Attached - FINAL NOTICE""; doc -> nymiam",Attachment,6
10/22/2018,"""NEW ORDER""; jar -> adwind",Attachment,3
10/22/2018,"""Alert: Important BMO Account Report""; xls -> trickbot",Attachment,4
10/22/2018,"All subjects contain ""efax""; link -> doc -> hancitor -> pony",Link,8158
10/23/2018,"""URGENT RFQ-HMA-2120864-18""; rar -> agenttesla",Attachment,9
10/24/2018,"All subjects contain ""Apple""; link -> doc -> hancitor -> pony -> evilpony -> pandabanker",Link,7815
10/25/2018,All subjects contain japanese characters; doc -> ursnif,Attachment,50
10/29/2018,"All subjects contain ""HelloFax""; link -> doc -> hancitor -> pony -> ursnif",Link,"7,958"
10/30/2018,"""URGENT RFQ-HMA-3010864-18""; arj (rar) -> agenttesla",Attachment,
10/31/2018,"""Siffron RFQ 4308/311018""; xlsx -> hawkeye keylogger",Attachment,