Emotet malware resurfaces with a new update Word template

Emotet is using a new template with Microsoft Word message stating an update alert.

Emotet is a malware infection that spreads through emails containing Word documents with malicious macros. When opening these documents, their contents will try to trick the user into enabling macros so that the Emotet malware will be downloaded and installed on the computer.

After successful installation, Emotet starts using the system to send spam emails, install other malware and initiate ransomware attacks. Emotet generally uses various templates like invoices, shipping notices, resumes, or purchase orders, or even COVID-19 information to lure its target.

The documents shared with Emotet malware generally contain malicious attachments that will require enable content permission. These attachments use malicious macros to install Emotet in the targeted system.

The latest template used by Emotet is one that contains Word document update alert. Emotet is requesting users to update their Microsoft Word to add an important new feature.

To upgrade Microsoft Word, the document tells the user to click on the Enable Editing and then the Enable Content button, which will cause cause the malicious macros to execute. Emotet is most widely spread malware around the world and is used to install various Trickbot and QBot malware onto a victim's computer.

After installation TrickBot and QBot will attempt to steal stored passwords, bank information, and assorted other information, but also commonly lead to various dangerous ransomware attacks.

Install NPAV on your devices to ensure best in class ransomware protection. NPAV protects your devices from all kinds of cyber attacks.

Use NPAV and join us on a mission to secure the cyber world.