Emotet adopts Microsoft OneNote attachments

Web: https://malware.news/t/emotet-adopts-microsoft-onenote-attachments/67953

Last week, Emotet returned after a three month absence when the botnet Epoch 4 started sending out malicious emails with malicious Office macros. While the extracted attachments were inflated to several hundred megabytes, it was surprising to see that Emotet persisted in using the same attack format.

Indeed, Microsoft has been rolling out its initiative of auto-blocking macros from downloaded documents since last summer. This has forced criminals to revisit how they want to deliver malware via malspam. One noticeable …

attachments emotet microsoft onenote