{"id":34930,"date":"2019-04-24T09:03:07","date_gmt":"2019-04-24T01:03:07","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=34930"},"modified":"2019-04-24T09:03:11","modified_gmt":"2019-04-24T01:03:11","slug":"emotet-multi-faceted-malware-now-more-prevalent-in-emails","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2019\/04\/24\/emotet-multi-faceted-malware-now-more-prevalent-in-emails\/","title":{"rendered":"Emotet multi-faceted malware now more prevalent in emails"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Sophos, a player in network and endpoint security, published a SophosLabs Uncut report about the multi-faceted malware that has become more prevalent and dangerous over time, Emotet. <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The malware operates on a mass scale. Everything it does, it does in bulk. A typical infection begins when the victim receives a specially crafted spam email. Emotet\u2019s creators send these out by the thousands and, in some cases, the bots themselves send more. The lures employ mass-created malicious document files. The payload URLs, from where the malware eventually gets downloaded, come in large batches, with the same file hosted in multiple locations in case some of those sites get shut down (and they do).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In order to operate at this scale, Emotet\u2019s creators seem to have refined the process by which they customize each batch of messages they transmit. The message changes slightly, though it may follow a common trope, or thematic pattern: A shipping confirmation, purchase order, or an invoice asking the recipient to pay the sender (whom the recipient will likely never have heard of).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Moreover, people who look at this kind of spam, day in and day out, can\u2019t help but notice the profusion of spelling errors, typos, grammatically challenged copy, and other small failures of attention to detail in these messages. I\u2019m as guilty of this as anyone else. And yet, it doesn\u2019t seem to matter that these messages contain oddly constructed sentences, or misspellings of the name of a government agency in messages ostensibly sent by that government agency.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In many cases Emotet also tries to steal data, turning a malware infection into a data breach. Some Emotet variants skim email addresses and names from email client data and archives, likely so they can be sold as part of a wider list and used to spread more malicious spam. Others inspect your web browser, stealing histories and saved usernames and passwords. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Sophos, a player in network and endpoint security, published a SophosLabs Uncut report about the multi-faceted malware that has become more prevalent and dangerous over time, Emotet. <\/p>\n","protected":false},"author":6,"featured_media":34931,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[5684,54,206],"class_list":["post-34930","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-headlines","tag-emotet","tag-security","tag-sophos"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/34930","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=34930"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/34930\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/34931"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=34930"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=34930"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=34930"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}