Emotet Awakens With New Campaign of Mass Email Exfiltration

guest · Oct 31, 2018

Emotet Awakens With New Campaign of Mass Email Exfiltration
October 31, 2018
https://blog.kryptoslogic.com/malware/2018/10/31/emotet-email-theft.html

The Emotet malware family just raised the stakes by adding email exfiltration to its arsenal, thereby escalating its capabilities to cyber espionage.

This new capability is effectively taking all existing Emotet infections with emails and sending them back to the attacker going back 180 days in mail history.
A Brief Overview of Emotet’s Email Harvesting Module
Previous Emotet modules already used the Outlook Messaging API to steal contact lists. This API is, essentially, an interface that allows an application to become email-ready. The most common cases of MAPI usage are Simple MAPI, included in Windows as part of the default Windows Live email client, or the full MAPI as used by Outlook and Exchange. [...]

The new module [...] however, is more thorough, and also includes email subjects and bodies. It will crawl every email of every subfolder in the interpersonal message (IPM) root folder, [...]
Click to expand...

Minimalist · Nov 9, 2018

Emotet launches major new spam campaign

A week after adding a new email content harvesting module, and following a period of low activity, the malicious actors behind Emotet have launched a new, large-scale spam campaign.
Click to expand...

https://www.welivesecurity.com/2018/11/09/emotet-launches-major-new-spam-campaign/

Log in or Sign up

Emotet Awakens With New Campaign of Mass Email Exfiltration

guest Guest

Minimalist Registered Member

Log in or Sign up

Emotet Awakens With New Campaign of Mass Email Exfiltration

guest Guest

Minimalist Registered Member

Useful Searches