Case 1: Executive Spear-Phishing

A Sales Executive at Your_Company PLC received an email that he didn't expect from a customer. He claims that the customer never uses generic greetings such as "Good day" and didn't expect any amount of money to be transferred to his account. The email also contains an attachment that he never requested.

Tip: Open the provided phishing_casestudy.eml file with Thunderbird (If not installed, install it via thunderbird.net). Use this information to answer the following questions.

Case 2: A Holiday Like Any Other...

As an IT department personnel of Akalanda Financial, one of your responsibilities is to support your fellow employees with their technical concerns. While everything seemed ordinary and mundane, this gradually changed when several employees from various departments started reporting an unusual email they had received. Unfortunately, some had already submitted their credentials and could no longer log in.

Task: The phishing emails to be analyzed are located in the phishing-line-email directory. You must investigate the incident by:

• Analyzing the email samples provided by your colleagues.
• Retrieving and analyzing the phishing URLs.
• Using CTI-related tooling and grep commands to gather intelligence on the adversary's kit.