Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Date,Details,Email,Payload,Type,Users Targeted
- 4/1/2018,All subjects contain "Document #|Order #|Ticket #|Payment #|Ticket #", zip -> js -> gandcrab ransomware for the month,Attachment,645
- 4/1/2018,All subjects contain "Document #|Order #|Ticket #|Payment #|Ticket #", zip -> doc -> gandcrab ransomware for the month,Attachment,625
- 4/2/2018,"Emailing: <characters>", zip -> smb link -> js -> quantloader -> evilammy rat,Attachment,85
- 4/2/2018,"discount|coupon|promo|sale", zip -> smb link -> js -> quantloader -> evilammy rat,Attachment,1712
- 4/3/2018,"Voice Message from Outside Caller (<digits>m <digits>s)", zip -> smb link -> wsf -> evilammy rat,Attachment,1514
- 4/4/2018,"Photo from <name>", zip -> smb link -> vbs -> evilammy rat,Attachment,252
- 4/4/2018,All subjects contain "fatt", xls -> pandabanker,Attachment,13
- 4/5/2018,"P.O.NO. GEN-818", 7z -> pony,Attachment,9
- 4/6/2018,"Accelerated payment notice", doc -> trickbot,Attachment,4
- 4/10/2018,"Overdue Invoices", -> doc -> trickbot,Attachment,7
- 4/12/2018,"Secure mail waiting: (SECURE) - COMPLETED BANK CONFIRMATION", docx -> trickbot,Attachment,10
- 4/16/2018,All subjects contain "allegato", xls -> pandabanker for the month,Attachment,8
- 4/17/2018,"FW: Your HSBC application documents", doc -> trickbot,Attachment,5
- 4/17/2018,All subjects contain "pagamento|documento", xls -> pandabanker,Attachment,6
- 4/19/2018,"Gov.uk - Confidential Documents", doc -> trickbot,Attachment,17
- 4/19/2018,All subjects contain "HelloFax", link -> doc -> hancitor -> pony -> evilpony -> pandabanker,Link,458
- 4/24/2018,Japanese character subjects, xls -> urlzone -> ursnif continued into 4/25,Attachment,10
- 4/25/2018,Highjacked thread subjects, xls -> urlzone -> ursnif,Attachment,7
- 4/25/2018,"Courriel Sécure RBC / RBC Secure WebMail", doc -> trickbot,Attachment,10
- 4/25/2018,"Incoming BACs Documents", doc -> trickbot,Attachment,5
- 4/26/2018,All subjects contain "pagamento|fattura", xls -> smokeloader -> pandabanker,Attachment,29
- 4/27/2018,"payment request form", zip -> smb link -> vbs -> evilammy rat,Attachment,50
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
