← Back to Pulse Feed
PULSE DETAIL
Emotet is back again with a new campaign displaying many characteristics of older runs, including the use of Auto Open macros inside XLS documents. Cisco Talos has observed an increased activity of spam distributing this new strain beginning in early November 2022, and the volume of spam and Emotet infrastructure has been increasing since then to target multiple geographies around the world.
MITRE ATT&CK & Malware Families
Indicators of Compromise (11 / 2462 total)
| TYPE | INDICATOR | DESCRIPTION | CREATED | |
|---|---|---|---|---|
| hostname | db.rikaz.tech | — | 2022-11-09 | |
| hostname | ftp.agir-santeinternationale.com | — | 2022-11-09 | |
| hostname | ftp.pricoat.com.mx | — | 2022-11-09 | |
| hostname | ly.yjlianyi.top | — | 2022-11-09 | |
| hostname | www.careofu.com | — | 2022-11-09 | |
| hostname | www.chacaltattoo.com.br | — | 2022-11-09 | |
| hostname | www.detertecnica.com | — | 2022-11-09 | |
| hostname | laboritm2022.scienceontheweb.net | — | 2022-11-09 | |
| hostname | www.elaboro.pl | — | 2022-11-09 | |
| hostname | www.melisetotoaksesuar.com | — | 2022-11-09 | |
| hostname | www.tugarden.com | — | 2022-11-09 |