Mailing List Archive

Pedro, do you see sigs for it yet? We're seeing a ton of
Doc.Dropper.EmotetRed1220-9816007-0.

Have you submitted a sample to Steve at Sanesecurity and clamav?

Best,
Dave

On 1/13/21 10:39 AM, Pedro David Marco wrote:
> Hi all...
>
> sorry for the semi off-topic...
>
> Today Emotet is being sent in an encrypted zip with the password
> embedded into an anti-ocr image..
>
> watch out!
>
> -------------
> Pedrete