silversurfer

Level 51
Verified
Trusted
Content Creator
Malware Hunter
Researchers noticed that Emotet operators took a break at the beginning of June and correctly assumed that it would not be for long.
No new campaigns were observed since then, and the general consensus in the infosec community was that the servers were down for maintenance.

The botnet's C2 infrastructure revived a couple of days ago, at 3PM EST, Cofense Labs noticed.
The Emotet botnet arose from the grave yesterday and began serving up new binaries. We noticed that the C2 servers began delivering responses to POST requests around 3PM EST on Aug 21. Stay vigilant and keep an eye out for any updates as we monitor for any changes.
— Cofense Labs (@CofenseL) August 22, 2019