{"id":3775,"date":"2021-11-17T19:37:30","date_gmt":"2021-11-17T14:07:30","guid":{"rendered":"https:\/\/xiarch.com\/blog\/?p=3775"},"modified":"2021-11-17T19:37:33","modified_gmt":"2021-11-17T14:07:33","slug":"what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world","status":"publish","type":"post","link":"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/","title":{"rendered":"What are the new Emotet Spam Operations Hitting Mailboxes across the World?"},"content":{"rendered":"\n<p><p style=\"text-align: justify;\">The Emotet malware kicked into action in recent days after a ten-month hiatus with different spam operations transmitting malicious documents to mailboxes across the world. Emotet is a Trojan infection that is distributed through spam operations with malicious attachments. If a user launches the attachment, malicious macros or JavaScript will download the Emotet DLL and load it into memory by utilizing PowerShell.Once loaded, the Trojan will search for and hijack emails to utilize in future spam operations and drop additional payloads such as TrickBot or Qbot that usually lead to ransomware infections.<\/p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Emotet Spamming Starts Again<\/strong><\/h2>\n\n\n\n<p><p style=\"text-align: justify;\">Recently, cybersecurity investigators posted a SANS Handler Diary on how the Emotet botnet had started spamming numerous emails operations to affect devices with the Emotet malware. As per the security researchers, the spam operations utilize reply-chain emails to lure the receivers into launching the attached malicious Word, Excel, and password-protected ZIP files.<\/p><\/p>\n\n\n\n<p><p style=\"text-align: justify;\">Reply-chain phishing emails are when previously stolen email threads are used with spoofed replies to distribute malware to other users. In the samples shared by Duncan, we can see Emotet using reply-chains related to a &#8220;missing wallet,&#8221; a CyberMonday sale, canceled meetings, political donation drives, and the termination of dental insurance.<\/p><\/p>\n\n\n\n<p><p style=\"text-align: justify;\">Attached to these emails are Excel or Word documents with malicious macros or a password-protected ZIP file attachment containing a malicious Word document, with examples given below:&nbsp; &nbsp;<\/p><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image1-1024x597.jpg\" alt=\"What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image1\" class=\"wp-image-3777\" width=\"634\" height=\"369\" srcset=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image1-1024x597.jpg 1024w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image1-300x175.jpg 300w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image1-768x448.jpg 768w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image1.jpg 1116w\" sizes=\"(max-width: 634px) 100vw, 634px\" \/><\/figure><\/div>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image3-1024x597.jpg\" alt=\"What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image2\" class=\"wp-image-3778\" width=\"622\" height=\"362\" srcset=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image3-1024x597.jpg 1024w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image3-300x175.jpg 300w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image3-768x448.jpg 768w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image3.jpg 1116w\" sizes=\"(max-width: 622px) 100vw, 622px\" \/><\/figure><\/div>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image1-1-1024x597.jpg\" alt=\"What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image3\" class=\"wp-image-3780\" width=\"616\" height=\"358\" srcset=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image1-1-1024x597.jpg 1024w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image1-1-300x175.jpg 300w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image1-1-768x448.jpg 768w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image1-1.jpg 1116w\" sizes=\"(max-width: 616px) 100vw, 616px\" \/><\/figure><\/div>\n\n\n\n<p><p style=\"text-align: justify;\">There are recently two different malicious documents being distributed in the new Emotet spam operations. The first is an Excel document template that states that the document will only work on desktops or laptops and that the user needs to click on &#8216;Enable Content&#8217; to view the contents properly.<\/p><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image4-1024x570.jpg\" alt=\"What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image4\" class=\"wp-image-3779\" width=\"646\" height=\"359\" srcset=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image4-1024x570.jpg 1024w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image4-300x167.jpg 300w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image4-768x428.jpg 768w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image4.jpg 1065w\" sizes=\"(max-width: 646px) 100vw, 646px\" \/><\/figure><\/div>\n\n\n\n<p><p style=\"text-align: justify;\">The malicious Word attachment is using the &#8216;Red Dawn&#8217; template and says that as the document is in &#8220;Protected&#8221; mode, users must enable content and editing to view it properly.<\/p><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image5.jpg\" alt=\"What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image5\" class=\"wp-image-3781\" width=\"649\" height=\"362\" srcset=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image5.jpg 1023w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image5-300x168.jpg 300w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image5-768x429.jpg 768w\" sizes=\"(max-width: 649px) 100vw, 649px\" \/><\/figure><\/div>\n\n\n\n<p><p style=\"text-align: justify;\"><strong>How do Emotet Attachments harm Devices?<\/strong><\/p><\/p>\n\n\n\n<p><p style=\"text-align: justify;\">When you open Emotet attachments, the document template will state that previewing is not available and that you need to click on &#8216;Enable Editing&#8217; and &#8216;Enable Content&#8217; to view the content properly.<\/p><\/p>\n\n\n\n<p><p style=\"text-align: justify;\">However, once you click on these buttons, malicious macros will be enabled that launch a PowerShell command to download the Emotet loader DLL from a compromised WordPress site and save it to the C:\\ProgramData folder.<\/p><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image6-1024x289.jpg\" alt=\"What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image6\" class=\"wp-image-3782\" width=\"719\" height=\"203\" srcset=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image6-1024x289.jpg 1024w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image6-300x85.jpg 300w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image6-768x217.jpg 768w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image6.jpg 1124w\" sizes=\"(max-width: 719px) 100vw, 719px\" \/><\/figure><\/div>\n\n\n\n<p><p style=\"text-align: justify;\">Once downloaded, the DLL will be launched using C:\\Windows\\SysWo64\\rundll32.exe, which will copy the DLL to a random folder under %LocalAppData% and then reruns the DLL from that folder.<\/p><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image7.jpg\" alt=\"What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image7\" class=\"wp-image-3783\" width=\"554\" height=\"283\" srcset=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image7.jpg 1014w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image7-300x153.jpg 300w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image7-768x392.jpg 768w\" sizes=\"(max-width: 554px) 100vw, 554px\" \/><\/figure><\/div>\n\n\n\n<p><p style=\"text-align: justify;\">After some time, Emotet will configure a startup value under the HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run to launch the malware when Windows starts.<\/p><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image8-1024x398.jpg\" alt=\"What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image8\" class=\"wp-image-3784\" width=\"570\" height=\"221\" srcset=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image8-1024x398.jpg 1024w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image8-300x117.jpg 300w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image8-768x298.jpg 768w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image8.jpg 1184w\" sizes=\"(max-width: 570px) 100vw, 570px\" \/><\/figure><\/div>\n\n\n\n<p><p style=\"text-align: justify;\">The Emotet malware will now silently remain running in the background while waiting for commands to execute from its command and control server. These commands could be to search for an email to steal, spread to other computers, or install additional payloads, such as the TrickBot or Qbot trojans.<\/p><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image9.jpg\" alt=\"\" class=\"wp-image-3785\" width=\"630\" height=\"328\" srcset=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image9.jpg 975w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image9-300x157.jpg 300w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-image9-768x401.jpg 768w\" sizes=\"(max-width: 630px) 100vw, 630px\" \/><\/figure><\/div>\n\n\n\n<p><p style=\"text-align: justify;\">At this time our experts have not seen any additional payloads dropped by Emotet, which has also been confirmed by our security researcher\u2019s tests.<\/p><\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Fighting Against Emotet<\/strong><\/h4>\n\n\n\n<p><p style=\"text-align: justify;\">Malware and botnet monitoring org Abuse.ch has released a list of 245 command and control servers that perimeter firewalls can block to prevent communication with command and control servers. Blocking communication to C2s will also prevent Emotet from dropping further payloads on compromised devices.<\/p><\/p>\n\n\n\n<p><p style=\"text-align: justify;\">An international law enforcement operation took down the Emotet botnet in January 2021, and for ten months, the malware has not been active.<\/p><\/p>\n\n\n\n<p><p style=\"text-align: justify;\">However, starting Sunday night, active TrickBot infections began dropping the Emotet loader on already infected devices, rebuilding the botnet for spamming activity. The return of Emotet is a significant event that all network admins, security professionals, and Windows admins must monitor for new developments.<\/p><\/p>\n\n\n\n<p><p style=\"text-align: justify;\">In the past, Emotet was considered the most widely distributed malware and has a good chance of regaining its previous ranking.<\/p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Emotet malware kicked into action in recent days after a ten-month hiatus with different spam operations transmitting malicious documents to mailboxes across the world. Emotet is a Trojan infection that is distributed through spam operations with malicious attachments. If a user launches the attachment, malicious macros or JavaScript will download the Emotet DLL and [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":3786,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[6],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.11 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What are the new Emotet Spam Operations Hitting Mailboxes across the World? - Xiarch Solutions Private Limited<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What are the new Emotet Spam Operations Hitting Mailboxes across the World? - Xiarch Solutions Private Limited\" \/>\n<meta property=\"og:description\" content=\"The Emotet malware kicked into action in recent days after a ten-month hiatus with different spam operations transmitting malicious documents to mailboxes across the world. Emotet is a Trojan infection that is distributed through spam operations with malicious attachments. If a user launches the attachment, malicious macros or JavaScript will download the Emotet DLL and [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/\" \/>\n<meta property=\"og:site_name\" content=\"Xiarch Solutions Private Limited\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/xiarch\/\" \/>\n<meta property=\"article:published_time\" content=\"2021-11-17T14:07:30+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-11-17T14:07:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-featured-image.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Xiarch Security\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@xiarch\" \/>\n<meta name=\"twitter:site\" content=\"@xiarch\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Xiarch Security\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/\"},\"author\":{\"name\":\"Xiarch Security\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c\"},\"headline\":\"What are the new Emotet Spam Operations Hitting Mailboxes across the World?\",\"datePublished\":\"2021-11-17T14:07:30+00:00\",\"dateModified\":\"2021-11-17T14:07:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/\"},\"wordCount\":659,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\"},\"articleSection\":[\"Vulnerabilities\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/\",\"url\":\"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/\",\"name\":\"What are the new Emotet Spam Operations Hitting Mailboxes across the World? - Xiarch Solutions Private Limited\",\"isPartOf\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#website\"},\"datePublished\":\"2021-11-17T14:07:30+00:00\",\"dateModified\":\"2021-11-17T14:07:33+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/xiarch.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What are the new Emotet Spam Operations Hitting Mailboxes across the World?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/xiarch.com\/blog\/#website\",\"url\":\"https:\/\/xiarch.com\/blog\/\",\"name\":\"Xiarch Solutions Private Limited\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/xiarch.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\",\"name\":\"Xiarch\",\"url\":\"https:\/\/xiarch.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png\",\"contentUrl\":\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png\",\"width\":300,\"height\":300,\"caption\":\"Xiarch\"},\"image\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/xiarch\/\",\"https:\/\/twitter.com\/xiarch\",\"https:\/\/www.linkedin.com\/company\/xiarch\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c\",\"name\":\"Xiarch Security\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g\",\"caption\":\"Xiarch Security\"},\"sameAs\":[\"https:\/\/xiarch.com\/blog\/\"],\"url\":\"https:\/\/xiarch.com\/blog\/author\/vector\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What are the new Emotet Spam Operations Hitting Mailboxes across the World? - Xiarch Solutions Private Limited","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/","og_locale":"en_US","og_type":"article","og_title":"What are the new Emotet Spam Operations Hitting Mailboxes across the World? - Xiarch Solutions Private Limited","og_description":"The Emotet malware kicked into action in recent days after a ten-month hiatus with different spam operations transmitting malicious documents to mailboxes across the world. Emotet is a Trojan infection that is distributed through spam operations with malicious attachments. If a user launches the attachment, malicious macros or JavaScript will download the Emotet DLL and [&hellip;]","og_url":"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/","og_site_name":"Xiarch Solutions Private Limited","article_publisher":"https:\/\/www.facebook.com\/xiarch\/","article_published_time":"2021-11-17T14:07:30+00:00","article_modified_time":"2021-11-17T14:07:33+00:00","og_image":[{"width":1000,"height":525,"url":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/11\/What-are-the-new-Emotet-Spam-Operations-Hitting-Mailboxes-across-the-World-featured-image.jpg","type":"image\/jpeg"}],"author":"Xiarch Security","twitter_card":"summary_large_image","twitter_creator":"@xiarch","twitter_site":"@xiarch","twitter_misc":{"Written by":"Xiarch Security","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/#article","isPartOf":{"@id":"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/"},"author":{"name":"Xiarch Security","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c"},"headline":"What are the new Emotet Spam Operations Hitting Mailboxes across the World?","datePublished":"2021-11-17T14:07:30+00:00","dateModified":"2021-11-17T14:07:33+00:00","mainEntityOfPage":{"@id":"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/"},"wordCount":659,"commentCount":0,"publisher":{"@id":"https:\/\/xiarch.com\/blog\/#organization"},"articleSection":["Vulnerabilities"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/","url":"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/","name":"What are the new Emotet Spam Operations Hitting Mailboxes across the World? - Xiarch Solutions Private Limited","isPartOf":{"@id":"https:\/\/xiarch.com\/blog\/#website"},"datePublished":"2021-11-17T14:07:30+00:00","dateModified":"2021-11-17T14:07:33+00:00","breadcrumb":{"@id":"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/xiarch.com\/blog\/what-are-the-new-emotet-spam-operations-hitting-mailboxes-across-the-world\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/xiarch.com\/blog\/"},{"@type":"ListItem","position":2,"name":"What are the new Emotet Spam Operations Hitting Mailboxes across the World?"}]},{"@type":"WebSite","@id":"https:\/\/xiarch.com\/blog\/#website","url":"https:\/\/xiarch.com\/blog\/","name":"Xiarch Solutions Private Limited","description":"","publisher":{"@id":"https:\/\/xiarch.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/xiarch.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/xiarch.com\/blog\/#organization","name":"Xiarch","url":"https:\/\/xiarch.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png","contentUrl":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png","width":300,"height":300,"caption":"Xiarch"},"image":{"@id":"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/xiarch\/","https:\/\/twitter.com\/xiarch","https:\/\/www.linkedin.com\/company\/xiarch"]},{"@type":"Person","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c","name":"Xiarch Security","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g","caption":"Xiarch Security"},"sameAs":["https:\/\/xiarch.com\/blog\/"],"url":"https:\/\/xiarch.com\/blog\/author\/vector\/"}]}},"_links":{"self":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/3775"}],"collection":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/comments?post=3775"}],"version-history":[{"count":1,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/3775\/revisions"}],"predecessor-version":[{"id":3787,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/3775\/revisions\/3787"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/media\/3786"}],"wp:attachment":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/media?parent=3775"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/categories?post=3775"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/tags?post=3775"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}