Categories: Ad Guardian PlusNews

Emotet botnet returned to steal passwords

Emotet, a well-known botnet has begun sending out spam, again. About four months ago, the botnet stopped its campaigns but restarted pumping spam this morning. The emails were written in German, Polish, English and Italian users.

The users are tricked to open an attached document and enable macros, which triggers a PowerShell command to download Emotet from compromised sites, especially those running WordPress.

Malwarebytes warned that once installed “Emotet attempts to spread laterally, in addition to stealing passwords from installed applications. Perhaps the biggest threat, though, is that Emotet serves as a delivery vector for more dangerous payloads, such as ransomware.”

They also added that “Compromised machines can lay in a dormant state until operators decide to hand off the job to other criminal groups that will attempt to extort large sums of money from their victims. In the past, we’ve seen the infamous Ryuk ransomware being deployed that way.”

Ryuk is linked to the North Korean Lazarus Group, is thought to have made almost $3.8m for its operators in six months.

Emotet was originally a banking Trojan that was re-written to function as a malware loader. Its operators sell access to the botnet for clients to use as a malware distribution network.

According to Malwarebytes, Emotet malware was detected and removed over 1.5 million times between January and September 2018 alone. In July last year, US-CERT released an alert about Emotet and its capabilities.

Laurentiu Titei

View Comments

Recent Posts

Camera Driver Download, Update, and Install on Windows 11, 10

If you wish to download and update the camera driver for Windows 11/10 to run…

21 hours ago

Fixed: Something Went Wrong 1001 Error on Windows 11 and 10

If you are also getting the Microsoft Something Went Wrong 1001 or Error Code 1001…

4 days ago

How to Fix Mouse Cursor Disappears on Windows 10/11

If you also feel that the touchpad cursor disappears/the mouse cursor disappears on a Windows…

5 days ago

How to Add or Remove Programs on Windows 10 and 11

If you want to know how to add or remove programs to and from Windows…

6 days ago

How to Download ViGEm Bus Driver Safely for Windows 11,10

If you want to download and update the ViGEm bus driver safe then you can…

7 days ago

How to Fix bootrec /fixboot Access is denied Error in Windows 11

If you are getting the bootrec /fixboot access is denied error on the Windows 11/10…

1 week ago