{
	"id": "3d7eefad-3784-48c5-8672-a7bc289211fe",
	"created_at": "2026-04-26T02:20:13.436472Z",
	"updated_at": "2026-04-26T02:20:25.05197Z",
	"deleted_at": null,
	"sha1_hash": "7afc3fbb662c9e07f35c4a26ccdedf0dd63209b4",
	"title": "Scripted Sparrow | Fortra",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 65781,
	"plain_text": "Scripted Sparrow | Fortra\r\nArchived: 2026-04-26 02:05:39 UTC\r\nAttacker Email Address Address Type\r\n20120128_jatin@davpeps.onmicrosoft.com Service Abuse\r\naaron.logwood@teneo-consulting.net Attacker Controlled\r\naarontulchinsky@consultant.com Webmail\r\na.brewer@consultant.com Webmail\r\naccounting@busdevelopmentpc.com Attacker Controlled\r\naccounting-professionalconsults@pm.me Webmail\r\naccounts@mckinsey-advisors.com Attacker Controlled\r\naccountspayable@consultantfirm.us Attacker Controlled\r\naccountsreceivable@ezracorp.org Attacker Controlled\r\naccountsreceivables@businessexecutive-consulting.com Attacker Controlled\r\nadamn.kendall@consultant.com Webmail\r\nadmin@azurepmail.com Attacker Controlled\r\nadmin@executive-mail.org Attacker Controlled\r\nadmin@oreumails.com Attacker Controlled\r\nadmins@mails-ecure.site Attacker Controlled\r\nadmin@spectirum.com Attacker Controlled\r\naetheranalyticsnow3@dbzmail.com Webmail\r\naetheranalytics.one@dbzmail.com Webmail\r\naetheranalytics.pro1@dbzmail.com Webmail\r\naetheranalytics.pro4@techie.com Webmail\r\naether_analyticsteam1@dbzmail.com Webmail\r\naetheranalytics.teamwork01@dbzmail.com Webmail\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 1 of 19\n\na.fontenot@execs.com Webmail\r\nagritel@mweb.co.za Webmail\r\naimx.receipts@consultant.com Webmail\r\nakrambghannam@consultant.com Webmail\r\nalexander.santiago@consultants-bru.net Attacker Controlled\r\nalex.hernandez@mb3consult.net Attacker Controlled\r\nallen.smith@bridgewateradvisory.net Attacker Controlled\r\nalondra-t@consultant.com Webmail\r\nalsb.receipts@consultant.com Webmail\r\nals.receipts@consultant.com Webmail\r\nalternative.receivable@consultant.com Webmail\r\namo.receipts@consultant.com Webmail\r\nanabell@exco-leadership.info Attacker Controlled\r\nandadvistage@execs.com Webmail\r\nandy.cord@abasgav.com Attacker Controlled\r\nandy@logicestates.co.uk Compromised\r\nangela@heidrickus.info Attacker Controlled\r\nangel.ballo@pac-consult.com Attacker Controlled\r\nangelina_chase@consultant.com Webmail\r\nangelinachase@execs.com Webmail\r\nangie.holtzman@pinnacleglobalnetwork.ws Attacker Controlled\r\nanthony.coffman@teneostrategy.net Attacker Controlled\r\nap.remit@consultant.com Webmail\r\nar@coachingcsuites.com Attacker Controlled\r\nar@coaching-execs.com Attacker Controlled\r\nar@lgconsultinc.com Attacker Controlled\r\narnold.buckles@teneoconsulting.net Attacker Controlled\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 2 of 19\n\narnoldsa1@mweb.co.za Webmail\r\nar.slccconsulting@consultant.com Webmail\r\narthur.kelly@leadershipconsultingrcs.com Attacker Controlled\r\naximo.receipt@consultant.com Webmail\r\naxiom.ssolutions@nycmail.com Webmail\r\nback-up@armourbd.com Compromised\r\nbalc.receipts@consultant.com Webmail\r\nbcl.receipt@consultant.com Webmail\r\nben.doz@consultant.com Webmail\r\nben.mckinney@consultant.com Webmail\r\nbethany-davison@execs.com Webmail\r\nbethanydavison@execs.com Webmail\r\nbethanydavison@manageriall.com Attacker Controlled\r\nbetterup@uymail.com Webmail\r\nbilling@kornferry-inc.com Attacker Controlled\r\nbillings@consultingfirm.cloud Attacker Controlled\r\nbilling.us@post.com Webmail\r\nbillstos@libero.it Webmail\r\nblc.receipts@nycmail.com Webmail\r\nblq.receipts@consultant.com Webmail\r\nbls.receipt@consultant.com Webmail\r\nbluelinked-send@uymail.com Webmail\r\nbql.receipt@consultant.com Webmail\r\nbrad.grigson@precision-consultant.net Attacker Controlled\r\nbrandi.h@consultant.com Webmail\r\nbrandon.bradley@axiom-consultation.com Attacker Controlled\r\nbrandon.dewan@advancedbusinessconsulting.net Attacker Controlled\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 3 of 19\n\nbreanna.haugen@execs.com Webmail\r\nbreannahaugen@execs.com Webmail\r\nbrock.alonso@10g-consulting.net Attacker Controlled\r\nbruce.sanchez@blueprint-services.net Attacker Controlled\r\nbrucestanton@consultant.com Webmail\r\nbrucestanton@execs.com Webmail\r\nbru.receipts@adexec.com Webmail\r\nbru.receipts@nycmail.com Webmail\r\nbryan.johnson@pac-strategy.com Attacker Controlled\r\nbryan.kean@execs.com Webmail\r\nbusiness.crestline01@techie.com Webmail\r\nbusiness_crestline02@techie.com Webmail\r\nbusiness.crestline02@techie.com Webmail\r\nbusiness_crestline04@techie.com Webmail\r\nbusiness_crestline5@techie.com Webmail\r\nbxa.receipts@consultant.com Webmail\r\ncalvin.shaver@axiom-consultation.com Attacker Controlled\r\ncamden.willis@10g-consulting.net Attacker Controlled\r\ncampos_c9@consultant.com Webmail\r\ncandistevi@consultant.com Webmail\r\ncapstone.hub02@nycmail.com Webmail\r\ncapstone.hub3@nycmail.com Webmail\r\ncarla.krieman@ooointr.com Attacker Controlled\r\nceo@acoremail.com Attacker Controlled\r\nceo@arnmails.com Attacker Controlled\r\nceo@buymedcost.com Attacker Controlled\r\nceo@cbbrmail.com Attacker Controlled\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 4 of 19\n\nceo@eoxemail.com Attacker Controlled\r\ncharles.collins@blueprintconsultings.net Attacker Controlled\r\ncharles.collins@consultant.com Webmail\r\ncharles.marisol@consultants-bru.net Attacker Controlled\r\nchloe.rogers@kornferry.international Attacker Controlled\r\nchloe.rogers@korn-ferry.ws Attacker Controlled\r\nchloe.rogers@kornferry.ws Attacker Controlled\r\nchris.fernandez@mb3consult.net Attacker Controlled\r\nchristinacampbell@consultant.com Webmail\r\nchristine.stanley@counsellor.com Webmail\r\nchristopher.camacho@brdgwateranalytics.com Attacker Controlled\r\nchristopher.james@leadershipconsultingrcs.com Attacker Controlled\r\nchristopher.meyer@brdgwateranalytics.com Attacker Controlled\r\nchristopher.meyer@bridgewateradvisory.net Attacker Controlled\r\nchristopher.meyer@prcecslt.com Attacker Controlled\r\ncircleauth.crestline02@nycmail.com Webmail\r\ncirclebizz.crestline4@nycmail.com Webmail\r\ncirclebizz.crestline5@nycmail.com Webmail\r\ncliff.woods@pacstrategyanalytics.net Attacker Controlled\r\ncliff.woods@presc-consultant.net Attacker Controlled\r\ncmcnutt@consultant.com Webmail\r\ncody.carrignton@bridgeanalyticsolutions.com Attacker Controlled\r\ncolby.jones@teneoconsulting.net Attacker Controlled\r\ncomlit@nlsva.com Attacker Controlled\r\nconnect.fusionanalyticsteam00@dbzmail.com Webmail\r\nconsultant@adspendplatform.com Attacker Controlled\r\ncontroller.crestline02@nycmail.com Webmail\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 5 of 19\n\ncontroller.teneo@nycmail.com Webmail\r\ncorp.crestline06@nycmail.com Webmail\r\ncourtney.williams@vistage-global.info Attacker Controlled\r\ncquinn@ceocoachinginternational.info Attacker Controlled\r\ncrestanalytics-bill001@dbzmail.com Webmail\r\ncrestanalytics-bill002@dbzmail.com Webmail\r\ncrest.analyticsbill00@consultant.com Webmail\r\ncrest-analyticsbill7@dbzmail.com Webmail\r\ncrestanalytics.capitalteams2@dbzmail.com Webmail\r\ncrestanalytics-consult01@dbzmail.com Webmail\r\ncrestanalytics-consult02@dbzmail.com Webmail\r\ncrest.analyticsconsult3@dbzmail.com Webmail\r\ncrestanalyticsconsult3@dbzmail.com Webmail\r\ncrest.analytics_corp3@dbzmail.com Webmail\r\ncrest.analytics_corp5@dbzmail.com Webmail\r\ncrest.analytics_corp9@dbzmail.com Webmail\r\ncrestanalytics.globalservices4@dbzmail.com Webmail\r\ncrestanalytics_globalservices5@dbzmail.com Webmail\r\ncrest.analyticsreceipt03@consultant.com Webmail\r\ncrest_analytics.services7@dbzmail.com Webmail\r\ncrest.analyticsteam6@consultant.com Webmail\r\ncrestanalytics_wave6@dbzmail.com Webmail\r\ncrestanalyticszinfovault4@dbzmail.com Webmail\r\ncruz.nordmeyer@tsc-llc.net Attacker Controlled\r\ncruz.rogers@consult-teneos.com Attacker Controlled\r\ncrystal.wilford@canvasleadership.net Attacker Controlled\r\ncsd.receipts@consultant.com Webmail\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 6 of 19\n\ndarren.mccamant@teneo-strategy.com Attacker Controlled\r\ndash@businesssuite-dashboard.com Attacker Controlled\r\ndave.acuff@consultant.com Webmail\r\ndave.miller@consultant.com Webmail\r\ndavid.acuff@consultant.com Webmail\r\ndavid.crosland@brdgsltn.com Attacker Controlled\r\ndavid-harris@consultant.com Webmail\r\ndavid.montgomery@bridgeanalyticsolutions.com Attacker Controlled\r\ndavid.poindexter@abasgav.com Attacker Controlled\r\ndeborah.meyer@insead.academy Attacker Controlled\r\ndebra.berndt@vistageworldwideinc.us Attacker Controlled\r\ndenise.h.curles@consultant.com Webmail\r\ndevin.smith@10g-consultant.net Attacker Controlled\r\nd-gallagher@execs.com Webmail\r\ndiana.nguyen@consultant.com Webmail\r\ndiane.ott@ceo-coachinginternational.com Attacker Controlled\r\ndominicmathews@execs.com Webmail\r\ndonald.turner@abasgav.com Attacker Controlled\r\ndustinberry@execs.com Webmail\r\ndwayne_threatt@execs.com Webmail\r\ned.angelo@dr.com Webmail\r\neddie.stiger@consultantteneo.net Attacker Controlled\r\neddy.edmonds@precision-consultant.net Attacker Controlled\r\neleytyrhonda@execs.com Webmail\r\neley-tyrhonda@toke.com Webmail\r\nellenayancey@execs.com Webmail\r\nellen-yancey@execs.com Webmail\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 7 of 19\n\nellenyancey_@execs.com Webmail\r\nellenyancey@execs.com Webmail\r\neric.bansemer@brdgwateranalytics.com Attacker Controlled\r\nerin.rogers@vistage.ws Attacker Controlled\r\nevans.welch@pac-consulting.net Attacker Controlled\r\nexec@ddiworldinc.org Attacker Controlled\r\nexec@taliinstituteinc.org Attacker Controlled\r\nexecu-officesfware-miosoft@post.com Webmail\r\nexecutives@sslmailservices.com Attacker Controlled\r\nfelipe.perez@consultant.com Webmail\r\nfelipeperez@manageriall.com Attacker Controlled\r\nfrances.galloway@aconsulting-axi.com Attacker Controlled\r\nfrank.lewis@abasgav.com Attacker Controlled\r\nfrank.streseman@preciscsltn.com Attacker Controlled\r\nfusion.analytics_bill@dbzmail.com Webmail\r\nfusion.analytics_consultpro6@dbzmail.com Webmail\r\nfusionanalytics_now@dbzmail.com Webmail\r\nfusion-analyticspro001@dbzmail.com Webmail\r\ngamboa@plan-wellesleyglobal.com Attacker Controlled\r\ngary.davis@consultantteneo.net Attacker Controlled\r\ngcaquias978@consultant.com Webmail\r\ngcaquias@consultant.com Webmail\r\ngcartier@7badvisors.com Attacker Controlled\r\ng.dunston@consultant.com Webmail\r\ngeorge.hebert@teneoconsulting.net Attacker Controlled\r\ngeorge.viars@pac-consultants.net Attacker Controlled\r\ngeorge.viger@consultant.com Webmail\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 8 of 19\n\ngilbert-dunston@execs.com Webmail\r\ngilbert.dunston@execs.com Webmail\r\ngilbertdunston@execs.com Webmail\r\ngina@vistageglobal.info Attacker Controlled\r\nglenda.caquias@consultant.com Webmail\r\ngraham.vance@bridgeanalyticsolutions.com Attacker Controlled\r\ngreg.viger@presc-consultant.net Attacker Controlled\r\ngrundiazi@virgilio.it Webmail\r\nharold.henderson@blueprint-exp.net Attacker Controlled\r\nheatherguldy@execs.com Webmail\r\nhelloezra@techie.com Webmail\r\nhub.axiom01@nycmail.com Webmail\r\nhunter.jenkins@teneoconsulting.net Attacker Controlled\r\nhunter.taylor@pac-consult.com Attacker Controlled\r\nhunter.taylor@teneoconsulting.net Attacker Controlled\r\ninfo@abasgav.com Attacker Controlled\r\ninternet@spectirum.com Attacker Controlled\r\ninternet@ssbcglobal.org Attacker Controlled\r\njachill@consultant.com Webmail\r\njacob.abernathy@teneoconsulting.net Attacker Controlled\r\njacob.hill@aoiconsult.net Attacker Controlled\r\njake.cunningham@teneo-consulting.net Attacker Controlled\r\njames.andrini@bridgeanalyticsolutions.com Attacker Controlled\r\njames.speckhart@brdgwateranalytics.com Attacker Controlled\r\njamie@dannyandnicole.com Compromised\r\njamiemccarthy@consultant.com Webmail\r\njane@excoleadershipgroup.info Attacker Controlled\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 9 of 19\n\njane@novuscoach.info Attacker Controlled\r\njane@pacificplacement.com Compromised\r\njarrett.bolsen@brdgwateranalytics.com Attacker Controlled\r\njasmine_d@execs.com Webmail\r\njasonhasty@consultant.com Webmail\r\njason.m.hasty@consultant.com Webmail\r\njeff.ramsey@consultantteneo.net Attacker Controlled\r\njeff.ramsey@presc-consultant.net Attacker Controlled\r\njeff.rodriguez@the-tconsulting.com Attacker Controlled\r\njennifer.daniels@coaching-execs.com Attacker Controlled\r\njensen.wright@10gconsult.net Attacker Controlled\r\njeremy.cottingim@teneo-strategy.com Attacker Controlled\r\njeremy.karp@coachingcsuites.com Attacker Controlled\r\njermaine.jones@brdgsltn.com Attacker Controlled\r\njett.wright@10g-consulting.net Attacker Controlled\r\njim.speckhart@prcecslt.com Attacker Controlled\r\njlora536@consultant.com Webmail\r\njoanne-thomson@execs.com Webmail\r\njoanne.thomson@execs.com Webmail\r\njoe.duckworth@post.com Webmail\r\njohn.borst@presc-consultant.net Attacker Controlled\r\njohnchance@execs.com Webmail\r\njohn.cunningham@teneo-consulting.net Attacker Controlled\r\njohn.evans@consultantteneo.net Attacker Controlled\r\njohn.felder@canvasleadership.net Attacker Controlled\r\njohn_landolfe@consultant.com Webmail\r\njohnlandolfe@consultant.com Webmail\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 10 of 19\n\njorge.zorilla@consultant.com Webmail\r\njoselyn_izquierdo@consultant.com Webmail\r\njoselynizquierdo@consultant.com Webmail\r\njoselyn__izquierdo@contractor.net Webmail\r\njoselyn.izquierdo@execs.com Webmail\r\njoselynizquierdo@execs.com Webmail\r\njoseph.daniela@consultants-bru.net Attacker Controlled\r\njoshua.connors@teneo-consulting.net Attacker Controlled\r\nj-thompson@consultant.com Webmail\r\njulie.brimley@coachingmomentsrva.info Attacker Controlled\r\njustin.faith@consultantteneo.net Attacker Controlled\r\nkaren@excoleadership.info Attacker Controlled\r\nkarly.wieser@billing-g100network.com Attacker Controlled\r\nkasey.dang@consultant.com Webmail\r\nkeith.diaz@lrcs.consulting Attacker Controlled\r\nkelvin.wolfred@jc-clubconsult.com Attacker Controlled\r\nkenneth.brobston@brdgwater-analytics.net Attacker Controlled\r\nkenneth.brobston@post.com Webmail\r\nkenneth.murray@brdgwateranalytics.com Attacker Controlled\r\nkenneth.porter@consultant.com Webmail\r\nkernphilip43@gmail.com Webmail\r\nkevin.sander@post.com Webmail\r\nkevin.slaugther@preciscsltn.com Attacker Controlled\r\nkevin-smith@consultant.com Webmail\r\nkimaburton@consultant.com Webmail\r\nkiya.turner@consultant.com Webmail\r\nkumagai-m@midorisekkei.co.jp Compromised\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 11 of 19\n\nkurt.jackson@consultant.com Webmail\r\nlamar.jones@consultant.com Webmail\r\nlarryrods@execs.com Webmail\r\nlatoya.adams@consultant.com Webmail\r\nlauren@ellseycreative.com.au Attacker Controlled\r\nleah.jenkins@novusglobal-coach.info Attacker Controlled\r\nl.geubelle@g100chiefexecutives.com Attacker Controlled\r\nlgeubelle@g100network.org Attacker Controlled\r\nl.geubelle@receivable-g100ceo.com Attacker Controlled\r\nlisa@thegrowth-coach.info Attacker Controlled\r\nliveauth.crestline02@nycmail.com Webmail\r\nliveauth.crestline03@nycmail.com Webmail\r\nliveauth.crestline04@nycmail.com Webmail\r\nliveauth.crestline05@nycmail.com Webmail\r\nliveauth.crestline2@nycmail.com Webmail\r\nlori@careermp.info Attacker Controlled\r\nlucy.izzard@merilly.my Attacker Controlled\r\nlynette.oleary@pinnacleglobalnetwork.info Attacker Controlled\r\nmaddox.pollack@teneo-consultants.net Attacker Controlled\r\nmail@corpsiclouddesk.com Attacker Controlled\r\nmails@repviadeskbound.com Attacker Controlled\r\nmailsresearchteq@mail2one.com Webmail\r\nmamick@kitchenkraftinc.com Compromised\r\nmanager_crestline03@techie.com Webmail\r\nmarketingkomtal@gmail.com Webmail\r\nmark.scott@bridgewateradvisory.net Attacker Controlled\r\nmarlene.ramirez@consultant.com Webmail\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 12 of 19\n\nmarleneramirez@consultant.com Webmail\r\nmarlene.ramirez@contractor.net Webmail\r\nmarleneramirez@contractor.net Webmail\r\nmarlene.ramirez@execs.com Webmail\r\nmarleneramirez@execs.com Webmail\r\nmarleneramirez@manageriall.com Attacker Controlled\r\nmary.b@consultant.com Webmail\r\nmarybeth.sprows@g100ceos.app Attacker Controlled\r\nmatthew.eddins@preciscsltn.com Attacker Controlled\r\nmatthew.hogg@bridgeanalyticsolutions.com Attacker Controlled\r\nmatthew.pollack@consulting-teneo.com Attacker Controlled\r\nmatthew.stanton@consultant.com Webmail\r\nmaurice@mccannestatesltd.co.uk Compromised\r\nmaverick.bergmann@teneo-consultant.com Attacker Controlled\r\nmccarthy-jamie@consultant.com Webmail\r\nmelissa.camacho@bridgewateradvisory.net Attacker Controlled\r\nmelissa.hall@vistagepayments.info Attacker Controlled\r\nmelissa.hall@vistage.ws Attacker Controlled\r\nmerilyn_stjeor@counsellor.com Webmail\r\nmichael.meyer@bridgeanalyticsolutions.com Attacker Controlled\r\nmichael.shimley@bridgewateradvisory.net Attacker Controlled\r\nmichael.turner@bridgeanalyticsolutions.com Attacker Controlled\r\nmichael.wright@bridgeanalyticsolutions.com Attacker Controlled\r\nmike.benetatos@consultantteneo.net Attacker Controlled\r\nmike.bledsoe@consultant.com Webmail\r\nmike.crosland@abasgav.com Attacker Controlled\r\nmike.lewis@brdgsltn.com Attacker Controlled\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 13 of 19\n\nmike.mckinney@consultantcsr.com Attacker Controlled\r\nm@mail-1l.com Attacker Controlled\r\nmontrese.ross@consultant.com Webmail\r\nmontrese.ross@execs.com Webmail\r\nmxs.receipts@consultant.com Webmail\r\nmytxt_inf0teq@mail2one.com Webmail\r\nnathan.shah@pac-consulting.net Attacker Controlled\r\nnathan.smith@novus-global.ws Attacker Controlled\r\nnathan.smith@novus-worldwide.com Attacker Controlled\r\nnicholas.bennett@lr-consult.net Attacker Controlled\r\nnicholas.poindexter@bridgeanalyticsolutions.com Attacker Controlled\r\nnicholas.ryan@abasgav.com Attacker Controlled\r\nnicholas.scott@brdgwateranalytics.com Attacker Controlled\r\nnicholas.scott@bridgeanalyticsolutions.com Attacker Controlled\r\nnicole.dubay@vistage-worldwide.ws Attacker Controlled\r\nnina.benedict@7badvisors.com Attacker Controlled\r\nnortonrosefulbright-zelispayments@consultant.com Webmail\r\nn.penn@pennlegends.com Attacker Controlled\r\nnyamada@biznetvigator.com Webmail\r\noffice@azurepmail.com Attacker Controlled\r\noffice@azureprivatemail.com Attacker Controlled\r\noffice.capstone1@nycmail.com Webmail\r\noffice.capstone2@nycmail.com Webmail\r\noffice.capstone3@nycmail.com Webmail\r\noffice.capstone8@nycmail.com Webmail\r\noffice@ltsmails.com Attacker Controlled\r\noffice@prvtemails.com Attacker Controlled\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 14 of 19\n\nofficial@mosmails.com Attacker Controlled\r\noperalante@virgilio.it Webmail\r\npamela.curtis@consultant.com Webmail\r\npamela@talentmagnet-usa.info Attacker Controlled\r\npariveda.analytics@consultant.com Webmail\r\npariveda.billing1@consultant.com Webmail\r\npariveda.clients@consultant.com Webmail\r\npariveda.consultingfirm@consultant.com Webmail\r\npariveda.financehq@consultant.com Webmail\r\npariveda.financial@consultant.com Webmail\r\npariveda.financialdesk@consultant.com Webmail\r\npariveda.management@consultant.com Webmail\r\npariveda.receipt@consultant.com Webmail\r\npariveda.receipts@consultant.com Webmail\r\npariveda.receivable@consultant.com Webmail\r\npariveda.receivables@consultant.com Webmail\r\npariveda.solution@consultant.com Webmail\r\npariveda.solutionhub@consultant.com Webmail\r\npariveda.solutions@consultant.com Webmail\r\npariveda.teamdepts@consultant.com Webmail\r\npariveda.treasury@consultant.com Webmail\r\npatriciastaats@iname.com Webmail\r\npatrick.fields@consultant.com Webmail\r\npatrick.jackson@lrs-consult.com Attacker Controlled\r\npatrick.peterson@corpsiclouddesk.com Attacker Controlled\r\npatrickrey989@consultant.com Webmail\r\npatrick.sugimoto@consultant.com Webmail\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 15 of 19\n\npaulmckiel@chksascs.com Attacker Controlled\r\npaul.steede@presc-consultant.net Attacker Controlled\r\npayables@consultantfirm.us Attacker Controlled\r\npayables@rxglobal.com Compromised\r\npeter.bridgman@sagefoxcsg.com Attacker Controlled\r\npeter.carrington@bridgeanalyticsolutions.com Attacker Controlled\r\npeter.carrington@bridgewateradvisory.net Attacker Controlled\r\npeter.debroeck@consultantteneo.net Attacker Controlled\r\npeter.lerma@consultant.com Webmail\r\npeter.scott@bridgewateradvisory.net Attacker Controlled\r\npeter.searls@brdgwateranalytics.com Attacker Controlled\r\npeter.walker@brdgwateranalytics.com Attacker Controlled\r\nphilipp.hensler@merilly.my Attacker Controlled\r\nphilipp.hensler@ooointr.com Attacker Controlled\r\npilotcons@worldonline.co.za Webmail\r\nppierce@rhrinternational.info Attacker Controlled\r\nppierce@rhrinternationalllp.com Attacker Controlled\r\nprey@consultant.com Webmail\r\npulse.capstone2@nycmail.com Webmail\r\npulse.capstone4@nycmail.com Webmail\r\npulse.capstone5@nycmail.com Webmail\r\npulse.capstone6@nycmail.com Webmail\r\npulse.capstone7@nycmail.com Webmail\r\npulse.capstone8@nycmail.com Webmail\r\nqunette_byes@execs.com Webmail\r\nrandall.kise@consult-teneo.com Attacker Controlled\r\nrandjones@execs.com Webmail\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 16 of 19\n\nraven.chavez@teneo-consultants.net Attacker Controlled\r\nravi.khatod@corpsiclouddesk.com Attacker Controlled\r\nremittances@usa.com Webmail\r\nrep.crestline6@nycmail.com Webmail\r\nrex_moore@execs.com Webmail\r\nrex-moore@execs.com Webmail\r\nrexmoore@execs.com Webmail\r\nrex__moore@outlook.com Webmail\r\nrob.bledsoe@aconsulting-axi.com Attacker Controlled\r\nrob.bledsoe@consultant.com Webmail\r\nryan.speckhart@post.com Webmail\r\nsabrina.whisenant@consultant.com Webmail\r\nsgl-mail@consultant.com Webmail\r\nshaw.mckneely@teneoconsulting.net Attacker Controlled\r\nshelllygordon@outlook.com Webmail\r\nshimley.alan@brdgwateranalytics.com Attacker Controlled\r\nshimley.vance@abasgav.com Attacker Controlled\r\nshimley.wolfenbarger@bridgewateradvisory.net Attacker Controlled\r\nsiobhan.edmunds@axiom-consultation.com Attacker Controlled\r\nslc.global@consultant.com Webmail\r\nslcreceivables@consultant.com Webmail\r\nsraymond771@consultant.com Webmail\r\nstacychance@consultant.com Webmail\r\nstanjurjens019@consultant.com Webmail\r\nstan.jurjens@consultant.com Webmail\r\nstblaw-zelispayments@consultant.com Webmail\r\nstellastellina9o@virgilio.it Webmail\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 17 of 19\n\nsterling.pratt@consult-teneos.com Attacker Controlled\r\nsterling.spisak@teneo-consultingllc.net Attacker Controlled\r\nsteved@novusglobal.info Attacker Controlled\r\nsteven.garcia@leadershiprcs.com Attacker Controlled\r\nsteve.torres@preciscsltn.com Attacker Controlled\r\nsteve.woldt@pacstrategyanalytics.net Attacker Controlled\r\nszymon.mroz@czerniecin.onmicrosoft.com Service Abuse\r\nt.allennshanji@gmail.com Webmail\r\ntamous.willis@jc-clubconsult.com Attacker Controlled\r\nteam.aether1@nycmail.com Webmail\r\nteneo.controller@adexec.com Webmail\r\nteresa.m@consultant.com Webmail\r\nteresa_ortega@consultant.com Webmail\r\nteresa-ortega@consultant.com Webmail\r\nteresa.ortega@execs.com Webmail\r\nthomas.buzzelli@execs.com Webmail\r\nthomas.henning@e-gv.com Attacker Controlled\r\nthomas.juanita@consultants-bru.net Attacker Controlled\r\nthomas.taylor@leadershiprconsult.net Attacker Controlled\r\ntiffani.j@consultant.com Webmail\r\ntimothybelton@consultant.com Webmail\r\ntimothy.belton@outlook.com Webmail\r\ntom.jones@preciscsltn.com Attacker Controlled\r\ntom@jtomconsulting.com Compromised\r\ntoniasherrard@csaffety.com Attacker Controlled\r\ntyler.robinson@pac-analyticstrategy.net Attacker Controlled\r\ntyrhondae@execs.com Webmail\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 18 of 19\n\nulrich.brock@posteo.de Webmail\r\nvicente.robles@aioconsult.net Attacker Controlled\r\nvincent.hayes@consult-teneos.com Attacker Controlled\r\nvisionarysolutions.ar@consultant.com Webmail\r\nvistageworldwide@consultant.com Webmail\r\nwade.mckneely@pac-consulting.net Attacker Controlled\r\nwalter.godwin@teneostrategy.net Attacker Controlled\r\nwilson.slate@teneo-strategy.com Attacker Controlled\r\nw.ohmstede@invoice-vistage.com Attacker Controlled\r\nwork02@biznetvigator.com Webmail\r\nyancey.e@consultant.com Webmail\r\nyanceyellen@consultant.com Webmail\r\nztomita@nifty.com Webmail\r\nSource: https://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nhttps://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group\r\nPage 19 of 19",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MISPGALAXY"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://www.fortra.com/resources/guides/scripted-sparrow-prolific-bec-threat-group"
	],
	"report_names": [
		"scripted-sparrow-prolific-bec-threat-group"
	],
	"threat_actors": [],
	"ts_created_at": 1777170013,
	"ts_updated_at": 1777170025,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/7afc3fbb662c9e07f35c4a26ccdedf0dd63209b4.pdf",
		"text": "https://archive.orkl.eu/7afc3fbb662c9e07f35c4a26ccdedf0dd63209b4.txt",
		"img": "https://archive.orkl.eu/7afc3fbb662c9e07f35c4a26ccdedf0dd63209b4.jpg"
	}
}