Sankyo Frontier: Emotet spread from one employee's PC to 36 office PCs, and 43 mail accounts were used for mail posing as staff

1. 2020-09-18

   An employee's PC was found infected with Emotet after mail from outside posing as a colleague arrived. The company also confirmed that suspicious mail was being sent in its name. [1] [2] [3]

2. 2020-09-24

   The company announced the infection on its website and asked recipients not to open unexpected attachments. [3]

3. 2020-10-23

   A follow-up report said 36 office PCs had been infected and 43 mail accounts were believed to have been used for the spoofed mail. [2] [3]

The first infection came from opening an attachment in junk mail posing as a business partner. All PCs had antivirus software, but it failed to detect and isolate the file when it was opened. [3]

For the time being, Office and zip attachments in mail to and from the company were restricted. All infected PCs were cleaned and restored, and the company continued its investigation with an outside specialist. [3]