不正URLへのアクセス、不正メールの受信
-
メール受信した
弊社お客様32社
URLアクセスした
弊社お客様22社
-
2022/05/02
※2022/05/02 更新
04/30から発生していたマルウェア（Emotet）に感染させると考えられるメールの受信・URLアクセスを検知
メール及び添付ファイルを開かないでください
■IoC
添付ファイルハッシュ値：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※メールアーカイブにて検索が可能です。
※「添付ファイルハッシュ値」は弊社で観測したすべての情報を掲載しております。
通信先一覧：
hxxp://farschid[.]de/verkaufsberater_service/OZRw36a2y1CH2clUzY/
hxxp://77homolog[.]com[.]br/dev-jealves/GP55wbYNXnp6/
hxxp://geowf[.]ge/templates/pJRea3Iu3wG/
hxxp://h63402x4[.]beget[.]tech/bin/wl0ENiE3BhELXV6V/
hxxp://ecoarch[.]com[.]tw/cgi-bin/E/
hxxps://galaxy-catering[.]com[.]vn/galxy/Fg1vvhlYJ/
※「i-FILTER」アクセスログを検索し端末を特定してください
※「通信先一覧」は不要なアクセスを避けるため、一部変更しております。
■製品対応状況
▽m-FILTER
・偽装レベル2以上で隔離可能
・添付ファイル偽装判定（添付ファイルマクロ）で判定
▽i-FILTER
・[脅威情報サイト]カテゴリでブロック可能なよう対処済み
・ダウンロードフィルターでブロック可能
※暗号化された通信の場合は、SSL Adapterの設定を「利用」にする必要があります。
※ブロックの可否は各製品の設定によるため、実際の結果はアクセスログを参照してください。
