What is Emotet?
Emotet is a Trojan that is spread through email, that could contain a malicious attachment or a malicious link. Emotet utilizes social engineering tricks by using branding to disguise themselves to look legitimate by using tempting keywords “Payment Details”, and “Shipping Information” and luring the victim into downloading the malicious Office file and enabling macros.
Emotet uses C&C servers to receive updated versions of the virus as well as to dump stolen personal information.
How Does Emotet Spread?
Malspam is the main way that Emotet is distributed. Your friends, family, coworkers, and clients receive messages from Emotet after it has combed through your contacts list. Since the emails appear less spammy because they are originating from your compromised email account, recipients are more likely to click risky links and download malicious files because they feel safer.
Emotet can spread to other connected computers and nearby Wi-Fi networks using its worm-like ability to capture admin passwords. Emotet is an example of polymorphic malware since it may constantly alter its identifiable properties to avoid detection. It can adjust properly, for instance by going dormant to avoid discovery, if it finds itself operating in a virtual machine (VM) or sandbox environment.
Emotet frequently installs TrickBot, a different banking Trojan that targets Windows-based computers. To take advantage of the Windows EternalBlue vulnerability, TrickBot uses the Mimikatz program.
How Can I Protect Myself?
The first step is to educate yourself on what it is and how it works, so you are already ahead of the game.
- Make sure all your devices are up to date on the latest patches. In order to prevent hackers from exploiting the Windows EternalBlue vulnerability, which TrickBot frequently uses as a secondary Emotet payload, patch Windows as soon as possible.
- Don’t click on suspicious links
- Use stronger passwords and use two-factor authentication
- You can protect yourself by using Malwarebytes as an added layer of protection for home users, and for business owners, you can also use their business products.