- Found and analysed by Group-IB
- Seen since late March
- Threat type – credential stealer
- ‘Sender’ – Export Galaxy
- Key words: RE:FREE FACE MASK, Dear Sir/ Mada, hope the COVID 19 will pass soon and every one is safe, factory to produce mask, lilian di, Galaxy Electronic Industrial CO,. LTD.
