Emotet Botnet Distributing Self-Unlocking Password-Protected RAR Files to Drop Malware

The notorious Emotet botnet has been linked to a new wave of malspam campaigns that take advantage of password-protected archive files to drop CoinMiner and Quasar RAT on compromised systems. In an attack chain detected by Trustwave SpiderLabs researchers, an invoice-themed ZIP file lure was found to contain a nested self-extracting (SFX) archive, the first archive acting as a conduit to launch

from The Hacker News https://ift.tt/NCFq4Rr
via IFTTT

Comments

Popular posts from this blog

Critical Bugs Reported in Popular Open Source PJSIP SIP and Media Stack

Experts Reveal Over 150 Ways to Steal Control of 58 Android Stalkerware Apps