Riken Koryo: infection with malware believed to be Emotet led to large volumes of spoofed mail reusing past messages

An infection with what appears to be Emotet let attackers misuse mail accounts and send large volumes of spoofed mail in the company's name. The messages posed as replies to real mail, reusing the names, email addresses and text of past correspondence. Recipients were told to delete them without opening attachments or links. [1]