National Security Agency

“ Cyber threat actors executed a spear-phishing campaign from the email address [email protected] on 24 August 2016 targeting victims that included employees of U. S. Company 1, according to information that became available in April 2017. [1] This campaign appeared to be designed to obtain the end-users’ e-mail credentials by enticing the victims to click on an embedded link within a spoofed Google Alert e-mail, which would redirect the user to the malicious domain . ”

“ Information identified as UNCLASSIFIED//FOR OFFICIAL USE ONLY may be shared for cybersecurity purposes at the UNCLASSIFIED level once it is disassociated from NSA/CSS. Consult the originator prior to release of this information to any foreign government outside of the original recipients. ”