1
Threat Overview
The ISC Stormcast reports a potential threat involving the 'Emotet' malware, which is affecting users worldwide through phishing emails. The attack vector is via malicious attachments, and the vulnerability class is related to Office software. Users are advised to be cautious when opening email attachments.
2
Key Intelligence Points
1. Emotet malware is being distributed via phishing emails with malicious Office attachments. 2. The attack is affecting users worldwide, with a focus on business and enterprise environments. 3. The malware is exploiting vulnerabilities in Office software, particularly Microsoft Office versions prior to 2019. 4. Detection opportunities include monitoring for suspicious email attachments and registry modifications.
3
MITRE ATT&CK Techniques
T1566.001 Spearphishing Attachment
4
Indicators of Compromise (IOCs) / Affected Systems
Emotet malware, 5A4B2C3D.exe, HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Security
5
Mitigation & Detection
Users should update to the latest Microsoft Office version (2019 or later) and be cautious when opening email attachments, especially those with unknown senders.