H.I.S.: a PC is suspected to have been infected with Emotet and suspicious mail may be sent
A suspected infection with a virus believed to be Emotet was found on March 7, and suspicious mail impersonating the company was later confirmed.
Disclosed
2022-03-11
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
A PC was suspected of infection with a virus believed to be Emotet through an attack email. It immediately disconnected the PC from the network and restricted external access. [1]
It announced the case. It said suspicious mail might be sent to customers who had exchanged email with it and urged them to delete it. [1]
It announced that further investigation had confirmed suspicious mail impersonating its employees being sent by a third party. [2]
Timeline
- Started, Detected 2022-03-07
- Disclosed 2022-03-11
- 4 days
Organizations involved
[Breached][Moderate]Tokyo, ShinjukuPersonal services and entertainment
H.I.S. Co., Ltd.
Sources
- [1][Official]弊社を装った不審メールに関するご注意のお知らせH.I.S. Co., Ltd. · 2022-03-11
- [2][News]3月にEmotet感染公表のHIS、不審メールの発信を確認ScanNetSecurity · 2022-04-28 08:05