Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Date,Summary ,Details,Email Payload Type,Users Targeted
- 8/1/2019,Malicious email campaign; morning,"""Our Purchase Order.""; zip -> lokibot continued to 7/2",Attachment,44
- 8/1/2019,Malicious email campaign; evening,"All subjects contain ""I hacked your device""; zip -> nanocore",Attachment,20
- 8/2/2019,Malicious email campaign; evening,"""PAYMENTS SWIFT""; ace -> lokibot",Attachment,2
- 8/4/2019,Malicious email campaign; evening,"""Re: UPDATED STATEMENT OF ACCOUNTS""; zip -> agemttesla",Attachment,5
- 8/5/2019,Malicious email campaign; morning,"""New Order / Request For Quotation""; doc -> agenttesla",Attachment,5
- 8/5/2019,Malicious email campaign; morning,"""FW: New Quote Sheets: Reflective Collars w/ID Rings""; cab -> agenttesla",Attachment,2
- 8/5/2019,Malicious email campaign; evening,"""INQUIRY PO 17 // LO: 3121893""; doc -> agenttesla",Attachment,2
- 8/5/2019,Malicious email campaign; evening,"""Outstanding Invoice""; doc -> agenttesla",Attachment,5
- 8/6/2019,Malicious email campaign; morning,"""Re:PO-08-2019""; rar -> agenttesla",Attachment,2
- 8/6/2019,Malicious email campaign; morning,"""RE: SWIFT COPY USD 82500""; zip -> agenttesla",Attachment,7
- 8/6/2019,Malicious email campaign; morning,"""Re: UPDATED STATEMENT OF ACCOUNTS""; xlsx -> agenttesla",Attachment,5
- 8/6/2019,Malicious email campaign; morning,"""Greetings.""; iso -> formbook continued to 8/7",Attachment,15
- 8/6/2019,Malicious email campaign; morning,"""SAFARI NEW PO [MAL] 069015""; 7z -> remcos rat continued to 8/8",Attachment,4
- 8/7/2019,Malicious email campaign; morning,"""FW: RFQ_NPBLPL0223_07082019""; rar -> formbook",Attachment,6
- 8/7/2019,Malicious email campaign; evening,"""RFQ GAL-CHC191084""; rar -> lokibot continued to 8/9",Attachment,16
- 8/7/2019,Malicious email campaign; evening,"""Re: 300pcs Pi to Angela""; img -> agenttesla",Attachment,2
- 8/8/2019,Malicious email campaign; evening,"""Payment Details""; iso zip doc -> agenttesla",Attachment,2
- 8/11/2019,Malicious email campaign; evening,"""RE: ELMEX SEPTEMBER ORDER""; doc -> agenttesla",Attachment,2
- 8/11/2019,Malicious email campaign; evening,"""New Order #028481""; doc -> agenttesla",Attachment,2
- 8/12/2019,Malicious email campaign; evening,"""RFQ PO 13.08.2019""; doc -> avemaria",Attachment,2
- 8/13/2019,Malicious email campaign; morning,"""SOA For July /August 2019 ref : 55463""; doc -> agenttesla",Attachment,2
- 8/13/2019,Malicious email campaign; evening,"""DHL Final Shipment Notification : AWB#93007378582019""; rar -> agenttesla",Attachment,3
- 8/13/2019,Malicious email campaign; evening,"""PO [AMAL] 0690151""; zip -> remcos rat",Attachment,2
- 8/14/2019,Malicious email campaign; evening,"""STECHNO PO# STE- 45459 x""; doc -> agenttesla",Attachment,2
- 8/14/2019,Malicious email campaign; evening,"""RE: Purchase Order- Navata PO No.:1582019""; doc -> agenttesla",Attachment,2
- 8/19/2019,Malicious email campaign; evening,"""Re: PURCHASE INQUIRY EPM-INQ-0852019""; doc -> agenttesla",Attachment,2
- 8/20/2019,Malicious email campaign; morning,"""REQUEST FOR QUOTATION (Smart Gas Proposal (Ref : 3655 Rev. 1)""; xlsx -> agenttesla",Attachment,2
- 8/20/2019,Malicious email campaign; morning,"""Payment Advice - Advice Ref:[GLV820033890] / ACH credits / Customer Ref:[100000228118]; xlsx -> agenttesla",Attachment,2
- 8/21/2019,Malicious email campaign; morning,"""CREDIT CARD PAYMENT - AMERICAN EXPRESS - REF:0459""; zip -> link -> ps1 -> remcos rat",Attachment,2
- 8/21/2019,Malicious email campaign; evening,"""Invoice and Remittance advice for""; link -> trickbot",Link,28
- 8/23/2019,Malicious email campaign; evening,"""New Order|Purchase Order""; xlsx -> azorult continued to 8/26",Attachment,2
- 8/23/2019,Malicious email campaign; morning,"""ENQ No. 0658/0319""; doc -> agenttesla",Attachment,2
- 8/26/2019,Malicious email campaign; morning,"""SPECIFICATION FOR OUR NEW ORDER.""; zip -> agenttesla continued to 8/27",Attachment,20
- 8/26/2019,Malicious email campaign; morning,"""NV-ORDER SERVICE // FOB/HOFER / GOEZZE GMBH SHIPMENTS""; img -> agenttesla",Attachment,2
- 8/26/2019,Malicious email campaign; morning,"""SECURE EFT NOTIFICATION - ACH CREDIT - REF:M26""; zip -> ps1 -> remcos rat",Attachment,2
- 8/26/2019,Malicious email campaign; morning,"""WG: Vion international / Cemo GmbH""; ace -> lokibot",Attachment,2
- 8/26/2019,Malicious email campaign; evening,"""Fwd: MT103 SWIFT Payment Delivery Advice {64666044SI3395 - domain - 0250005541400}""; xlsx -> azorult",Attachment,3
- 8/26/2019,Malicious email campaign; evening,"""Confirm Order""; xlsx -> azorult",Attachment,2
- 8/27/2019,Malicious email campaign; morning,"""Re: SOA & NEW ORDER""; xlsx -> agenttesla",Attachment,3
- 8/27/2019,Malicious email campaign; morning,"""Fwd: REMITTANCE ADVICE: IF01200022823419"";xlsx",Attachment,3
- 8/29/2019,Malicious email campaign; morning,"""proforma invoice""; xlsx -> azorult",Attachment,7
- 8/29/2019,Malicious email campaign; morning,"""SECURE EFT TRANSMISSION - ACH CREDIT - REF:TA29|REF:M26""; zip -> remcos",Attachment,4
- 8/29/2019,Malicious email campaign; morning,All subjects contain DHL; zip -> vbs -> amadey -> pony,Attachment,1252
- 8/29/2019,Malicious email campaign; evening,"""signed P.O send invoice for payment""; rar -> formbook",Attachment,4
Advertisement
Add Comment
Please, Sign In to add comment