Pedro, do you see sigs for it yet? We're seeing a ton of Doc.Dropper.EmotetRed1220-9816007-0.

Have you submitted a sample to Steve at Sanesecurity and clamav?

Best,
Dave

On 1/13/21 10:39 AM, Pedro David Marco wrote:
Hi all...

sorry for the semi off-topic...

Today Emotet is being sent in an encrypted zip with the password embedded into an anti-ocr image..

watch out!

-------------
Pedrete

Reply via email to