1188
The botnet , which flip - flops from sending penny stock pump - and - dump emails to booby - trapped files that lead to malware ( usually Locky or Dridex ) , has been spotted slinging thousand upon thousand of emails in the last three or four days .
 emails: tool; the last three or four days: time
Given event type and trigger, please tell me the arguments of all the listed option. Output format is "name1: role1; name2: role2". 
Event type: phishing 
  Option: victim, attacker, attack pattern, purpose, damage amount, tool, time, place, trusted entity 
Text: {0} 
Answer:
 emails: tool; the last three or four days: time