09 December 25000pcs @ottomancloud.rar -

: Creating registry keys under HKCU\Software\Microsoft\Windows\CurrentVersion\Run to ensure the malware starts every time the computer reboots. Recommendations

: Extracting login data from Outlook and Thunderbird. 09 DECEMBER 25000PCS @OTTOMANCLOUD.rar

: Check the original email address. These often come from hijacked legitimate accounts or look-alike domains. 09 DECEMBER 25000PCS @OTTOMANCLOUD.rar