This impersonation was detected in Wapack Labs malicious email collections, and was used to pass a malicious email targeting both ProFYShip Management and an Indian based freight forwarder, In Synergy India (also located in Hong Kong and Shenzen, China). The email address is likely taken from a ProFY Ship Management open source shipping site, utilizing a legitimate email. This demonstrates the use of a maritime sector vessel/company to target or are being used as a conduit for malicious intent.
On 23 January 2019, Wapack Labs identified suspicious email activity from proprietary collection sources. The collection is focused on known maritime keys words used in phishing type attacks to spread various types of malicious malware.
In the sender’s field of this malicious email was observed: “MV VICTORIA. disch abt 7500 mt of wheat in bulk (Agency nomination).” The M/V VICTORIA is a legitimate bulk carrier, known to transport wheat. The sender email was: Captain Eduard Chepurnoy, chepurnoy@profyshipmanagement.com, who actually works for the ProFYShip Management company, located in Odessa Ukraine. ProFYShip is a company which provides the full or part-time ship management and also associated maritime services. The own six (6) vessels, none of which are involved in this spoof. On 23 January 2019 both Martine Traffic and Vessel Tracking had the M/V VICTORIA underway from Nemrut Bay, Turkey.
Analyst’s Note: Of interest, the sender email of Captain Eduard Chepurnoy, an actual employee of ProFYShip Management, is targeting the company itself.
The second target company is In Synergy, an Indian based freight forwarder and logistics company, specializing in marine, air and trucking shipping.
This information is derived from an official ProFYShip and In Synergy India open source web addresses and likely used for reconnaissance. This collection and analysis confirm an escalated interest in targeting the maritime/transportation sector by malicious actors.
Targets: profyshipmanagement.com: Ukrainian ship management; insynergyindia.com: Indian freight forwarder (offices in Hong Kong and Shenzen CN; insynergyindia.com: a freight forwarder and logistics company located in India and Hong Kong and Shanzen China.