3631
The attacks take the form of emails purportedly from famous companies – such as DHL and Saudi Aramco – and most were sent from “ legitimate email addresses belonging to valid organizations ” , says Kaspersky .
 ( phishing: purportedly from,  take the form of emails: attack pattern, famous companies: trusted entity, DHL: trusted entity, Saudi Aramco: trusted entity) 
Locate the role in the text that participated in the event based on the event type and return it in the event list. 
 Option: Event type: phishing, data breach, ransom, discover vulnerability, patch vulnerability, Arguments type: vulnerable system, capabilities, vulnerability, number of victim, issues addressed, compromised data, damage amount, common vulnerabilities and exposures, victim, patch number, number of data, tool, discoverer, time, purpose, place, payment method, releaser, vulnerable system version, attacker, supported platform, patch, price, vulnerable system owner, trusted entity, attack pattern. 
Text: {0} 
Answer:
 ( phishing: purportedly from,  take the form of emails: attack pattern, famous companies: trusted entity, DHL: trusted entity, Saudi Aramco: trusted entity) 