> JapanHacked_
[Resolved][Severity: Moderate][Malware]

Toba: employee PCs were infected with Emotet, and mail with encrypted zip files posing as staff went out

An employee opened fake mail posing as a business partner, the PC was infected, and several suspicious mails posing as staff were sent. The network was fully cut off for a time.

Disclosed

2020-10-20

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. An employee's PC opened fake mail posing as a business partner and was infected with Emotet, and several suspicious mails posing as staff went out. They carried the malware in encrypted zip files. [1]

  2. The company disclosed the case and asked people to delete unopened any mail in staff names with zip files that did not come from its own domain. [1]

Response

The company cut its network off entirely for a time, installed a security gateway on part of it and brought PCs back once they were checked. It did not say what data had leaked. [1]

Timeline

  1. Started, Detected 2020-10-16
  2. Disclosed 2020-10-20
  3. 4 days

Attack or cause

Method
[Malware]
Impact
Entry point
E-mail

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]社員PCが「Emotet」感染、鳥羽洋行騙る暗号化ZIP付不審メール確認ScanNetSecurity · 2020-10-23 08:00