☰
✕
✕

New strain of Emotet banking Trojan spreading internally like Worm

The infamous banking Trojan Emotet have begun to surface in internet that has the ability to internally propagate and using brute-force attack technique.

The Trojan strain was reported by Fidelis Cyber security blog post that suggested that this new strain may have been inspired by the Wannacry and NotPetaya malware that had worm like capabilities so that it may spread rapidly through networks.

" It stands to reason that crime ware authors have taken note of the broad impact observed in these particular events and are looking to incorporate spreader components in their toolkits," the post reads. " The Wannacry and Petya campaigns have clearly demonstrated how inclusion of other techniques like credential dumpers (Mimikatz) and exploits (EternalBlue) can greatly accelerate propagation across enterprises."

Fidelis researchers found out that some versions became wormable over a month ago. The researchers found out a self-extracting RAR file containing two files. The Emotet variant was not wrapped in a traditional way like other worms, but the researchers theorize that the whole package may not be a direct component of Emotet but only a part of the Emotet that disguises itself as a Trojan malware.

Tag : Trojan
FAQ
Q
How dangerous are they?
A
Windows Trojans represent a large security threat to your computer. Here I'll cover various scenarios, as well as provide you with further information so that you'll be able to realize how dangerous they are indeed.
Q
In what ways could I be infected?
A
The Complete Windows Trojans Paper discusses in-depth each of the possible scenarios as far as becoming infecting with a trojan is concerned. You're strongly advised to closely look at them, thus being able to understand and properly react to the threat posed by the Windows Trojans.
Q
How should we deal with potential malware problems in our company?
A
First of all you should establish an Anti-Malware Policy, guiding the staff members on the process of protecting critical company data from destruction or exposure.
Q
Are there any effective Anti-Trojan Packages?
A
Yes, there are, although you should never fully rely on them as they only partly solve the problem. It's you who has the responsibility of maintaining an acceptable level of protection.
Q
Do Anti-Virus Scanners provide reasonable protection?
A
You must realize that there isn't a 100% sure way of protecting against Windows Trojans infections, although your major aim is to significantly reduce the risk by understanding how they work and how you could become infected.