Advertisement
James_inthe_box

May Malspam Campaigns

Jun 3rd, 2019
838
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.34 KB | None | 0 0
  1. Date,Details,Email Payload Type,Users Targeted
  2. 5/2/2019,Various hijacked email threads; zi -> ursnif,Attachment,3
  3. 5/2/2019,"""Payment Invoice Slip(Swift TT)""; zip -> formbook continued into 4/3",Attachment,4
  4. 5/5/2019,"""Quotation""; iso -> nanocore",Attachment,2
  5. 5/7/2019,Sender address is admin@santiagona.ml various subjects; zip -> houdini worm continued into 5/8,Attachment,14
  6. 5/7/2019,"""Shipment for Pickup""; img -> nanocore continued into 5/8",Attachment,15
  7. 5/8/2019,"Sender address is ""Tom.Brennan@coldlinerexpress.com""; docm -> trickbot",Attachment,2
  8. 5/10/2019,"""RFQ for PHUC LOI IMPORT � EXPORT TRADING CO., LTD VIETNAM""; rar ->",Attachment,2
  9. 5/13/2019,FW: ??: Outstanding Invoice; doc -> nanocore continued into 5/16,Attachment,6
  10. 5/17/2019,"""RE: Rejecting invoice""; gz -> lokibot continued into 5/18",Attachment,30
  11. 5/17/2019,"""HSBC Bank� (Payment Notification_Date: 17 May 2019)""; ace -> lokibot",Attachment,2
  12. 5/18/2019,"""Re: Purchase Order Details HTE1903-008""; rar -> lokibot continued into 5/20",Attachment,22
  13. 5/20/2019,"""Order No:6180""; docx -> hawkeye keylogger",Attachment,4
  14. 5/21/2019,Various Italian subjects; xls -> ursnif,Attachment,4
  15. 5/21/2019,All subjects contain IRS or Internal Revenue Service; link -> hancitor -> pony -> ursnif,Link,1893
  16. 5/21/2019,"""SWIFT COPY""; rar -> lokibot",Attachment,28
  17. 5/22/2019,"""Urgent Request for Quotation - Milind Mohite trading""",Attachment,2
  18. 5/23/2019,All subjects contain DocuSign; link -> hancitor -> pony -> evilpony -> gozi-ursnif,Link,209
  19. 5/23/2019,"""Request for Quotation_ Refinery Upgrading & _EXPANSION_Pipping_REV A_HEC_180117""; zip -> SecurityXploded",Attachment,4
  20. 5/23/2019,"""Re : new order and payments""; rar -> agenttesla continued into 5/24",Attachment,27
  21. 5/27/2019,"""Payment For Outstanding Dues""; iso -> agenttesla",Attachment,11
  22. 5/27/2019,"Blank subject; 7z -> sodinokibi ransomware""",Attachment,2
  23. 5/29/2019,"""SHIPPING DOCS""; iso -> agenttesla",Attachment,9
  24. 5/30/2019,"""Invoice June/July""; rar -> hawkeye keylogger continured into 6/1",Attachment,51
  25. 5/30/2019,"""Enquiry No.: T7L1S27976 in Unit PESD Hyderabad""; xlsx -> agenttesla",Attachment,2
  26. 5/30/2019,"""RE: MV.PACON VICTORY (CTM DELIVERY REQUEST)""; 7zip -> pony",Attachment,2
  27. 5/30/2019,"""Re: TT copy INV 786/282/17 - USD65, 845.00 & INV 786/283/17 -USD15, 530.00 5/31/2019""; rar -> agenttesla",Attachment,3
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement