Emotet is back after a summer break
Summary: Cisco Talos reported that the Emotet botnet fully reawakened as of Sept. 16, 2019, resuming spam operations after its operators paused command-and-control activity at the start of June 2019. Talos found Emotet steals victims' outbound email credentials and distributes them to other bots, collecting 349,636 unique username/password/IP combinations over 10 months, with 75 percent of those credentials lasting under one day.
What's compelling: Emotet's stolen email credentials let it send attack messages from unrelated servers, and stolen email threads appeared in almost one quarter of its outbound emails after it reemerged, up from about 8.5 percent in April 2019 - so a familiar sender name no longer means a familiar source.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026