silversurfer

Level 66
Verified
Trusted
Content Creator
Malware Hunter
After months of inactivity, the notorious Emotet spamming trojan has come alive again as it spews out a massive campaign of malicious emails targeting users worldwide.

Binary Defense researcher James Quinn told BleepingComputer that Emotet was last seen on Feb 7th, 2020, after which the spamming trojan went quiet and has not sent out any spam emails since.

While the Emotet tracking group Cryptolaemus has been tracking the infection and has seen its malicious modules being updated over time, there has been no spamming conducted by the botnet other than some small tests earlier this week.

Today, Emotet suddenly surged back to life with reply-chain, shipping, payment, and invoice spam that deliver malicious Word documents spreadsheets.
 

silversurfer

Level 66
Verified
Trusted
Content Creator
Malware Hunter
Last edited:

silversurfer

Level 66
Verified
Trusted
Content Creator
Malware Hunter
"Emotet seems to be using not only stolen email bodies, but is now including stolen attachments as well," email security firm Cofense said today.
"This lends to even more authenticity in their phishing emails. In one example we found 5 benign attachments and a dropper link within the templated portion of the email."
 
Top