Over the past few weeks, we have identified a number of
organisations and government agencies impacted by a new generation
of a previously seen banking trojan malware: called Emotet. Given
the widespread nature of this attack and significant impact, we are
issuing this public update.
There are a number of technical indicators of compromise which
confirm the presence of Emotet. However, practically speaking,
organisations will usually first become aware that they are
impacted by the presence of malicious emails being sent to internal
employees and external clients from an external sender, purporting
to be the organisation.
The malicious email will usually contain an email trail of a
previous conversation, with a document attached taking various
forms (.doc, .docx, .pdf). Once the document is opened, malware
will propagate throughout the recipient's network. In short: DO
NOT OPEN ATTACHMENT.
