Hacked Uniden Commercial Site Serves Emotet Trojan

guest · Apr 11, 2019

Hacked Uniden Commercial Site Serves Emotet Trojan
April 11, 2019
https://www.bleepingcomputer.com/news/security/hacked-uniden-commercial-site-serves-emotet-trojan/

Uniden's website for commercial security products has been hacked to host a Word document that delivers what appears to be a garden variety of the Emotet trojan, also known as Geodo and Heodo.
Emotet sitting nice and snug
Discovered by threat tracker JTHL , the malicious Word file is stored in the '/wp-admin/legale/' folder and includes a macro that downloads what seems to be a variant of Emotet, according to URLhaus, a project from abuse.ch that collects, tracks and shares malicious URLs with security professionals and network administrators.

All three of them are detected by 26 antivirus engines on VirusTotal scanning service at the moment. The Word document with the malicious macro is now detected as a threat by 20 antivirus engines on the same service.
Company has been notified
It is unclear when the malware was planted on the website, but it is still present at the moment of writing, despite the company being first alerted of the situation over Twitter more than 24 hours ago.
Click to expand...

Log in or Sign up

Hacked Uniden Commercial Site Serves Emotet Trojan

guest Guest

Log in or Sign up

Hacked Uniden Commercial Site Serves Emotet Trojan

guest Guest

Useful Searches