Emotet Botnet Is Back, Servers Active Across the World

[silversurfer]

Content source

https://www.bleepingcomputer.com/news/security/emotet-botnet-is-back-servers-active-across-the-world/

Researchers noticed that Emotet operators took a break at the beginning of June and correctly assumed that it would not be for long.
No new campaigns were observed since then, and the general consensus in the infosec community was that the servers were down for maintenance.

The botnet's C2 infrastructure revived a couple of days ago, at 3PM EST, Cofense Labs noticed.

The Emotet botnet arose from the grave yesterday and began serving up new binaries. We noticed that the C2 servers began delivering responses to POST requests around 3PM EST on Aug 21. Stay vigilant and keep an eye out for any updates as we monitor for any changes.
— Cofense Labs (@CofenseL) August 22, 2019​

Emotet Botnet Is Back, Servers Active Across the World

Command and control (C2) servers for the Emotet botnet appear to have resumed activity and deliver binaries once more. This comes after being inert since the beginning of June.

www.bleepingcomputer.com