You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@spamassassin.apache.org by Pedro David Marco <pe...@yahoo.com> on 2021/01/13 15:39:59 UTC

Emotet today..

Hi all...
sorry for the semi off-topic...
Today Emotet is being sent in an encrypted zip with the password embedded into an anti-ocr image..
watch out!
-------------Pedrete

Re: Emotet today..

Posted by Dave Wreski <dw...@guardiandigital.com>.

Pedro, do you see sigs for it yet? We're seeing a ton of 
Doc.Dropper.EmotetRed1220-9816007-0.

Have you submitted a sample to Steve at Sanesecurity and clamav?

Best,
Dave

On 1/13/21 10:39 AM, Pedro David Marco wrote:
> Hi all...
> 
> sorry for the semi off-topic...
> 
> Today Emotet is being sent in an encrypted zip with the password 
> embedded into an anti-ocr image..
> 
> watch out!
> 
> -------------
> Pedrete