en Japan: an employee's PC was infected with Emotet, and suspicious mail using staff and site names went to customers

1. 2020-09-16

   An employee opened an attachment in suspicious mail posing as a business partner, and the PC was infected with Emotet. [1] [2]

2. 2020-09-17

   A customer reported mail posing as the employee. [1] [2]

3. 2020-09-18

   Public disclosure and warning. [1]

Some email addresses and sender names of the employee's correspondents leaked. The suspicious mail used staff or site names as the sender, but came from the attackers' addresses, with a ZIP file named after a date attached. [1] [2]