### Overview
Following the detection of the phishing campaign attributed to Deep Panda, further analysis reveals advanced social engineering tactics targeting Anthem employees. The campaign utilized convincingly crafted emails impersonating internal IT support.

### Key Details
- **Emails Origin**: The emails were traced back to a known malicious IP address associated with previous Deep Panda activities.
- **Payload Delivery**: Once the link in the phishing email was clicked, it redirected users to a fake login page capturing credentials.

### Next Steps
Understanding the delivery mechanism provides context for the subsequent event: the suspicious execution of 'Derusbi' malware, which leveraged compromised credentials for initial access.