> JapanHacked_
[Resolved][Severity: Major][Malware]

Iwade Kensetsu: an employee's PC was infected with Emotet, leaking mail addresses and text and sending spoofed mail

An employee PC was infected on August 28. A file of mail addresses and message text had been made on it, and there were traces of mail reusing past messages being sent out.

Disclosed

2020-09-02

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. An employee's PC was infected with Emotet. [1] [2]

  2. Public disclosure. A file with internal and external mail addresses and message text had been created on the PC, and there were traces of real past messages being sent out. [2]

Response

The company apologized by email and fax to contacts whose addresses may have leaked, and asked them not to open attachments or links in mail claiming to be from its staff, and to check with the sender. [1] [2]

Timeline

  1. Started, Detected 2020-08-28
  2. Disclosed 2020-09-02
  3. 5 days

Attack or cause

Method
[Malware]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[Name][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]「Emotet」に感染、なりすましメールが送信 - 岩出建設Security NEXT · 2020-09-11
  2. [2][News]社員PCがEmotetに感染、社内外のメールデータが流出（岩出建設）ScanNetSecurity · 2020-09-14 08:00