Categories: Ad Guardian PlusNews

Emotet botnet returned to steal passwords

Emotet, a well-known botnet has begun sending out spam, again. About four months ago, the botnet stopped its campaigns but restarted pumping spam this morning. The emails were written in German, Polish, English and Italian users.

The users are tricked to open an attached document and enable macros, which triggers a PowerShell command to download Emotet from compromised sites, especially those running WordPress.

Malwarebytes warned that once installed “Emotet attempts to spread laterally, in addition to stealing passwords from installed applications. Perhaps the biggest threat, though, is that Emotet serves as a delivery vector for more dangerous payloads, such as ransomware.”

They also added that “Compromised machines can lay in a dormant state until operators decide to hand off the job to other criminal groups that will attempt to extort large sums of money from their victims. In the past, we’ve seen the infamous Ryuk ransomware being deployed that way.”

Ryuk is linked to the North Korean Lazarus Group, is thought to have made almost $3.8m for its operators in six months.

Emotet was originally a banking Trojan that was re-written to function as a malware loader. Its operators sell access to the botnet for clients to use as a malware distribution network.

According to Malwarebytes, Emotet malware was detected and removed over 1.5 million times between January and September 2018 alone. In July last year, US-CERT released an alert about Emotet and its capabilities.

Laurentiu Titei

View Comments

Recent Posts

Best Discord Alternatives and Similar Software to Use

If you are searching for the best Discord alternatives, you can follow this guide to…

22 hours ago

Best Y2mate Online Alternatives for Downloading YouTube Videos

The demand for video-downloading applications and websites has increased significantly over the years. And these…

1 day ago

Packard Bell Drivers Download & Updates in Windows 11/10

Have you newly purchased a Packard Bell laptop? Then, it is inevitable that you download…

2 days ago

How to Fix 0x80070035 Network Path Not Found Windows 11

Error 0x80070035, “Network path was not found,” is a common issue that occurs when attempting…

3 days ago

How to Move Valorant to Another Drive

Are you experiencing lower PC performance, slow Valorant loading, and sluggish response? Do you want…

3 days ago

Best Reliable IP and Network Scanner Tools to Use in 2025

Do you wish to gain visibility and control over your network? Then, you need the…

4 days ago