Hello and welcome to the Monday, February 23rd, 2006 edition of the Sands and

its Storm Center's Stormcast.

My name is Johannes Ulrich, Recognity from Jacksonville, Florida.

And this episode is brought you by the Sands.edu graduate certificate program in penetration testing and ethical hacking.

Brad on Friday published a diary talking about some Japanese fishing emails.

Now, Brad doesn't speak Japanese.

He does not reside in Japan.

But still, for some reason, got on a mailing list of a particular threat actor

that's sending out phishing emails in Japanese. Now, Brad is talking a little bit about

why he believes that all of the emails that he received at part of these campaigns come from

the same group, the same threat actor. But the real I think lesson here is that the threat actors,

they are not just sending emails in English.

And this can particularly be a problem for multinational companies

where your normal business language is English.

And as a result, often when you're

talking about fishing, when you're doing fishing tests, you're sending these tests in English.

years back, we had a Sansod EDU student who looked into, for example, how to figure out

what languages are actually being used in your environment based on

emails that are being sent and then somewhat tailoring some of the fishing tests based on it.

I know fishing testing and such as a controversial subject in itself, but if you're doing it,

you may as well want to try to do it as well as possible.

And I think part of this should be that you are looking at, well, fishing emails in different

...