Status Bar Dots
62b6009d45c3e7557aac70e9 1495140409

Email Content

Subject

Re: AMENDED SALE AGREEMENT

Body

Good day!


You can look on a complete list of the needed documents here in one document:


hXXp://rsmzi[.]com/et/uiutsotsn


File password: U523


Hi [Impersonated Employee First Name],


This is received will revert soonest.


Regards


[Recipient Name]

¨"¨


From: [Impersonated Employee Name] <[Impersonated Employee Email Address]>

Sent: Tuesday, September 28, 2021 9:25 AM

To: [Hijacked Thread Recipients]

Subject: RE: AMENDED SALE AGREEMENT


 [Hijacked Thread Contents]

 


Analysis Overview

Vector

Link-based

Goal

Malware Delivery

Tactic

Hijacked Email Thread
External Compromised Account
Spoofed Display Name

Theme

Fake Document

Impersonated Party

Employee - Other