{"id":5011,"date":"2018-08-05T17:00:43","date_gmt":"2018-08-05T11:30:43","guid":{"rendered":"https:\/\/antivirus.comodo.com\/blog\/?p=5011"},"modified":"2020-09-23T06:50:46","modified_gmt":"2020-09-23T01:20:46","slug":"emotet-banking-malware-attacks-government-public-sectors","status":"publish","type":"post","link":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/emotet-banking-malware-attacks-government-public-sectors\/","title":{"rendered":"Emotet banking malware attacks government and public sectors"},"content":{"rendered":"

\"emotet<\/p>\n

Emotet is a new banking trojan. It is a downloader that functions to download other trojans into the system or a network. It is the most expensive and destructive malware affecting state, tribal, local, and territorial governments, and even creating impact against the public and private sectors. The US Cert team has alerted on the consistent spread of the trojan since 2017 and also declared that it uses the most destructive way to steal various information. Emotet banking malware is delivered through Microsoft office document and attachment named as Greeting card, this helps the attacker to access the Windows API.. This banking trojan spreads quickly that can cost around $1 million to gain back the network. The hackers are constantly finding methods and techniques to help the malware stay persistent within the network.<\/p>\n

Emotet trojan is not just responsible to drop new trojans in the system, but also manages to attack the signature-based detection by altering the register keys.<\/p>\n

The hackers deploy efficient techniques to notify false signals when it is executed in the sandboxed environment. The Modular DLLs function entitles the banking malware to evolve and update its functionalities..<\/p>\n

Emotet Banking Malware Infection Process<\/strong><\/p>\n

Emotet banking malware spreads through emails that contain malware links or attachments while the contents of the email would look genuine claiming to be PayPal receipts or any other banking related information which convinces the users to open the mail and the attachment in it.<\/p>\n

When the users click on the attachment or the link or a word document enabled with macros, the trojan starts spreading rapidly across the local network.<\/p>\n

US CERT reveals that there exists 5 spreader modules deployed by the Emotet banking malware that includes:<\/p>\n