Toba: employee PCs were infected with Emotet, and mail with encrypted zip files posing as staff went out
An employee opened fake mail posing as a business partner, the PC was infected, and several suspicious mails posing as staff were sent. The network was fully cut off for a time.
Disclosed
2020-10-20
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
An employee's PC opened fake mail posing as a business partner and was infected with Emotet, and several suspicious mails posing as staff went out. They carried the malware in encrypted zip files. [1]
The company disclosed the case and asked people to delete unopened any mail in staff names with zip files that did not come from its own domain. [1]
Response
The company cut its network off entirely for a time, installed a security gateway on part of it and brought PCs back once they were checked. It did not say what data had leaked. [1]
Timeline
- Started, Detected 2020-10-16
- Disclosed 2020-10-20
- 4 days
Organizations involved
[Breached][Moderate]Tokyo, BunkyoWholesale and retail trade
Toba, Inc.
Sources
- [1][News]社員PCが「Emotet」感染、鳥羽洋行騙る暗号化ZIP付不審メール確認ScanNetSecurity · 2020-10-23 08:00