Read on Twitter
As Solorigate continues to be the top security topic, it’s business as usual for some cybercrime operations. After being seen in short-lived campaigns before Christmas, Emotet is back this week in a new campaign that uses various lures, including, oddly, "Christmas Party".
Emotet is known for its penchant for using holiday-themed emails, but this week’s campaign also uses what’s proven effective for the operators: a wide range of lures in massive volumes of emails, the use of fake replies or forwarded emails, password-protected archive attachments.
The new Emotet campaign still uses documents that contain malicious macro that, when enabled, connects to seven malicious domains to download the Emotet payload.
Microsoft 365 Defender continues to provide durable, coordinated protection against Emotet campaigns. Microsoft Defender for Office 365 detects malicious attachments and malicious links on emails, and Microsoft Defender for Endpoint blocks the malicious documents and payloads.
