Ransomware
Abuser: Fredericka Sinsabaugh
Some sort of ridiculous extortion attempt.... base64 encoding of html to obfuscate the body of the email... Received: from EUR02-AM5-obe.outbound.protection.outlook.com (mail-54.outbound.protection.outlook.com [40.92.67.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "GlobalSign Organization Validation CA - SHA256 - G3" (not verified)) by XXX.com (Postfix) with ESMTPS id 1260942 for <[email protected]>; Sat, 17 Aug 2019 09:20:16 -0600 (MDT) From address in email Fredericka Sinsabaugh <[email protected]>
United States, 2019-08-17 20:15:10