James_inthe_box

August 2019 Campaigns

Sep 3rd, 2019
2,626
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.12 KB | None | 0 0
  1. Date,Summary ,Details,Email Payload Type,Users Targeted
  2. 8/1/2019,Malicious email campaign; morning,"""Our Purchase Order.""; zip -> lokibot continued to 7/2",Attachment,44
  3. 8/1/2019,Malicious email campaign; evening,"All subjects contain ""I hacked your device""; zip -> nanocore",Attachment,20
  4. 8/2/2019,Malicious email campaign; evening,"""PAYMENTS SWIFT""; ace -> lokibot",Attachment,2
  5. 8/4/2019,Malicious email campaign; evening,"""Re: UPDATED STATEMENT OF ACCOUNTS""; zip -> agemttesla",Attachment,5
  6. 8/5/2019,Malicious email campaign; morning,"""New Order / Request For Quotation""; doc -> agenttesla",Attachment,5
  7. 8/5/2019,Malicious email campaign; morning,"""FW: New Quote Sheets: Reflective Collars w/ID Rings""; cab -> agenttesla",Attachment,2
  8. 8/5/2019,Malicious email campaign; evening,"""INQUIRY PO 17 // LO: 3121893""; doc -> agenttesla",Attachment,2
  9. 8/5/2019,Malicious email campaign; evening,"""Outstanding Invoice""; doc -> agenttesla",Attachment,5
  10. 8/6/2019,Malicious email campaign; morning,"""Re:PO-08-2019""; rar -> agenttesla",Attachment,2
  11. 8/6/2019,Malicious email campaign; morning,"""RE: SWIFT COPY USD 82500""; zip -> agenttesla",Attachment,7
  12. 8/6/2019,Malicious email campaign; morning,"""Re: UPDATED STATEMENT OF ACCOUNTS""; xlsx -> agenttesla",Attachment,5
  13. 8/6/2019,Malicious email campaign; morning,"""Greetings.""; iso -> formbook continued to 8/7",Attachment,15
  14. 8/6/2019,Malicious email campaign; morning,"""SAFARI NEW PO [MAL] 069015""; 7z -> remcos rat continued to 8/8",Attachment,4
  15. 8/7/2019,Malicious email campaign; morning,"""FW: RFQ_NPBLPL0223_07082019""; rar -> formbook",Attachment,6
  16. 8/7/2019,Malicious email campaign; evening,"""RFQ GAL-CHC191084""; rar -> lokibot continued to 8/9",Attachment,16
  17. 8/7/2019,Malicious email campaign; evening,"""Re: 300pcs Pi to Angela""; img -> agenttesla",Attachment,2
  18. 8/8/2019,Malicious email campaign; evening,"""Payment Details""; iso zip doc -> agenttesla",Attachment,2
  19. 8/11/2019,Malicious email campaign; evening,"""RE: ELMEX SEPTEMBER ORDER""; doc -> agenttesla",Attachment,2
  20. 8/11/2019,Malicious email campaign; evening,"""New Order #028481""; doc -> agenttesla",Attachment,2
  21. 8/12/2019,Malicious email campaign; evening,"""RFQ PO 13.08.2019""; doc -> avemaria",Attachment,2
  22. 8/13/2019,Malicious email campaign; morning,"""SOA For July /August 2019 ref : 55463""; doc -> agenttesla",Attachment,2
  23. 8/13/2019,Malicious email campaign; evening,"""DHL Final Shipment Notification : AWB#93007378582019""; rar -> agenttesla",Attachment,3
  24. 8/13/2019,Malicious email campaign; evening,"""PO [AMAL] 0690151""; zip -> remcos rat",Attachment,2
  25. 8/14/2019,Malicious email campaign; evening,"""STECHNO PO# STE- 45459 x""; doc -> agenttesla",Attachment,2
  26. 8/14/2019,Malicious email campaign; evening,"""RE: Purchase Order- Navata PO No.:1582019""; doc -> agenttesla",Attachment,2
  27. 8/19/2019,Malicious email campaign; evening,"""Re: PURCHASE INQUIRY EPM-INQ-0852019""; doc -> agenttesla",Attachment,2
  28. 8/20/2019,Malicious email campaign; morning,"""REQUEST FOR QUOTATION (Smart Gas Proposal (Ref : 3655 Rev. 1)""; xlsx -> agenttesla",Attachment,2
  29. 8/20/2019,Malicious email campaign; morning,"""Payment Advice - Advice Ref:[GLV820033890] / ACH credits / Customer Ref:[100000228118]; xlsx -> agenttesla",Attachment,2
  30. 8/21/2019,Malicious email campaign; morning,"""CREDIT CARD PAYMENT - AMERICAN EXPRESS - REF:0459""; zip -> link -> ps1 -> remcos rat",Attachment,2
  31. 8/21/2019,Malicious email campaign; evening,"""Invoice and Remittance advice for""; link -> trickbot",Link,28
  32. 8/23/2019,Malicious email campaign; evening,"""New Order|Purchase Order""; xlsx -> azorult continued to 8/26",Attachment,2
  33. 8/23/2019,Malicious email campaign; morning,"""ENQ No. 0658/0319""; doc -> agenttesla",Attachment,2
  34. 8/26/2019,Malicious email campaign; morning,"""SPECIFICATION FOR OUR NEW ORDER.""; zip -> agenttesla continued to 8/27",Attachment,20
  35. 8/26/2019,Malicious email campaign; morning,"""NV-ORDER SERVICE // FOB/HOFER / GOEZZE GMBH SHIPMENTS""; img -> agenttesla",Attachment,2
  36. 8/26/2019,Malicious email campaign; morning,"""SECURE EFT NOTIFICATION - ACH CREDIT - REF:M26""; zip -> ps1 -> remcos rat",Attachment,2
  37. 8/26/2019,Malicious email campaign; morning,"""WG: Vion international / Cemo GmbH""; ace -> lokibot",Attachment,2
  38. 8/26/2019,Malicious email campaign; evening,"""Fwd: MT103 SWIFT Payment Delivery Advice {64666044SI3395 - domain - 0250005541400}""; xlsx -> azorult",Attachment,3
  39. 8/26/2019,Malicious email campaign; evening,"""Confirm Order""; xlsx -> azorult",Attachment,2
  40. 8/27/2019,Malicious email campaign; morning,"""Re: SOA & NEW ORDER""; xlsx -> agenttesla",Attachment,3
  41. 8/27/2019,Malicious email campaign; morning,"""Fwd: REMITTANCE ADVICE: IF01200022823419"";xlsx",Attachment,3
  42. 8/29/2019,Malicious email campaign; morning,"""proforma invoice""; xlsx -> azorult",Attachment,7
  43. 8/29/2019,Malicious email campaign; morning,"""SECURE EFT TRANSMISSION - ACH CREDIT - REF:TA29|REF:M26""; zip -> remcos",Attachment,4
  44. 8/29/2019,Malicious email campaign; morning,All subjects contain DHL; zip -> vbs -> amadey -> pony,Attachment,1252
  45. 8/29/2019,Malicious email campaign; evening,"""signed P.O send invoice for payment""; rar -> formbook",Attachment,4
Advertisement
Add Comment
Please, Sign In to add comment