Reported by 2 outlets
Beware of phishing emails disguised as quote requests
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 0.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.60 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Analysis
ASEC confirmed phishing emails disguised as quote requests targeting Korean entities. The emails request recipients to submit quotes for a project budget and prompt downloads of compressed attachments for verification. A related update notes similar emails disguised as project material purchase request forms, impersonating Korean company employees and using malicious XLS attachments. Events reference ASEC reports from 2026-09-27 and 2026-09-30.
This is a sustained social-engineering campaign using business-themed lures rather than generic spam. No specific malware family is named in these events beyond compressed and XLS payloads. Watch for ASEC follow-ups that name the malware family, infection counts, or victim sectors. Confirm whether any Korean government or national CERT issues a public alert linking these campaigns to a named threat actor.
Timeline
-
original reporting
Beware of phishing emails disguised as quote requests
asec.ahnlab.com · 16d ago · September 27th, 2026
Recently, the AhnLab SEcurity intelligence Center (ASEC) confirmed that phishing emails disguised as requests for project quotes are being circulated. The email body is disguised as a request to submit a quote for discussing the project budget and prompts recipients to download an attached compressed file for verification. [Figure 1] Phishing email body […]
-
update from asec.ahnlab.com
Beware of Phishing Emails That Disguise Themselves as Project Material Purchase Requests
asec.ahnlab.com · 16d ago · September 27th, 2026
Recently, the AhnLab SEcurity intelligence Center (ASEC) identified a case of phishing emails that disguise themselves as project material purchase request forms. These emails impersonate employees of a specific company in Korea and trick recipients into opening a malicious XLS file attached to the email, which is disguised as a project material purchase request form.
-
mentioned by malware.news
Beware of phishing emails disguised as quote requests
malware.news · 13d ago · September 30th, 2026