« previous next »
Pages: [1]   Go Down

Author Topic: Malspam pushes emotet malware...percalabia dot com/local.host  (Read 1557 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34048
  • malware fighter
Malspam pushes emotet malware...percalabia dot com/local.host
« on: July 31, 2018, 03:20:03 PM »
Where we stumbled upon it: https://urlquery.net/report/93623c87-4b61-4e4e-9cd3-856f46c04309
Analysis of Emotet maware: https://www.malware-traffic-analysis.net/2018/06/19/index.html
How site was attacked by exploit: https://github.com/Bypass007/vuln/blob/master/OpenResty/Uri%20parameter%20overflow%20in%20Openresty.md
US-CERT info now removed: ttps://webcache.googleusercontent.com/search?q=cache:42b0nE63tsAJ:https://www.us-cert.gov/ncas/alerts/TA18-201A+&cd=1&hl=nl&ct=clnk&gl=nl

polonus (volunteer website security analyst and website error-hunter)
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37698
Re: Malspam pushes emotet malware...percalabia dot com/local.host
« Reply #1 on: July 31, 2018, 03:50:38 PM »
Quote
Malspam pushes emotet malware.......   
The Evolution of Emotet: From Banking Trojan to Threat Distributor 
https://www.symantec.com/blogs/threat-intelligence/evolution-emotet-trojan-distributor

Also see  >>  https://forum.avast.com/index.php?topic=52252.msg1471055#msg1471055

« Last Edit: August 02, 2018, 05:36:11 PM by Pondus »
Logged

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34048
  • malware fighter
Re: Malspam pushes emotet malware...percalabia dot com/local.host
« Reply #2 on: August 02, 2018, 04:39:30 PM »
Thank you, Pondus

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pages: [1]   Go Up
« previous next »