> JapanHacked_
[Resolved][Severity: Moderate][Malware]

NISSEICOM: several office PCs were infected with Emotet, and spoofed mail posing as employees was sent

An employee reported a suspicious message on September 17. It was most likely Emotet, and a check of all office PCs the next day found several infected.

Disclosed

2020-09-25

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. An employee told the IT department about a suspicious message, and checks showed an Emotet infection was likely. Mail posing as employees was going from unrelated servers to people they had corresponded with. [1]

  2. A check of every office PC found several infected. [1]

Timeline

  1. Started, Detected 2020-09-17
  2. Disclosed 2020-09-25
  3. 8 days

Attack or cause

Method
[Malware]
Impact
Entry point
E-mail

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]複数端末が「Emotet」感染、なりすましメール送信 - ニッセイコムSecurity NEXT · 2020-09-25