Shin-ei: a PC at the security camera maker was infected with Emotet, leaking addresses and mail text of customers and partners

1. 2020-10-01

   An employee got mail posing as a business partner that quoted a real exchange from about a year earlier, opened the password-protected zip file and was infected. Logs show Emotet ran every time the PC was started after that. [1]

2. 2020-10-14

   The company learned that suspicious mail in its name was reaching several people, realized the PC was infected and took it off the network. [1]

3. 2020-10-23

   The company published its findings. No other PC was infected. [1]

Mail addresses and message text of customers and partners who had exchanged mail with the company or its staff leaked. The company said no card data leaked. [1]

It disabled macros, ran daily full scans on all PCs, changed passwords for its online shop and mail server and stepped up monitoring of outbound traffic. [1]