take the form of emails purportedly fromAttack.Phishingfamous companies – such as DHL and Saudi Aramco – and most were sentAttack.Phishingfrom “ legitimate email addresses belonging to valid organizations ” , says Kaspersky . However , Kaspersky says its analysis of the emails compared to known malware shows that “ no new code was written specifically for this attack ” . Kaspersky says the hackers could have accessedAttack.Databreachand read previous communications between the target and their partners . They may then have used this information to craftAttack.Phishingemail communications which appear to be legitimate , so that the victim didn ’ t recognize the malicious aspect of the email . If the email is opened , it can stealAttack.Databreachthe user ’ s authentication credentials , which are send to a remote server .