With Thanksgiving being celebrated in the United States, malware distributors are sending out holiday themed emails to distribute the Emotet Trojan and other malware.
New email campaigns are underway that pretend to be Thanksgiving Day greeting cards and office closing notices with last minute invoices. Users who fall for the emails and open the attached word documents will be left with a Windows computer infected with a password-stealing Trojan and possibly other malware.
One of the malicious email campaigns discovered by BleepingComputer pretends to be a "Thanksgiving Day Greeting Card" with a Word document attachment named "Thanksgiving-eCard.doc".
Thanksgiving Day Greeting Card malspam
As you can see by the text below, the email pretends to be from someone sending a Thanksgiving eCard and wishes for a nice holiday.
Good day, Wishing you a picture perfect table with a positive mood on this holiday=season. Happy Thanksgiving! Attachment: Thanksgiving Day Greeting eCard. “Gratitude makes sense of our past, brings peace for today and c=eates a vision for tomorrow.” - Melody Beattie
Another malicious email campaign discovered by the Emotet tracking group Cryptolaemus pretends to be a reply to a previous email and contains a malicious Word document.
Caption
This email template also tells the user that they are closed for the Thanksgiving holiday and upcoming future holidays. This may be done to create a sense of urgency and to have the recipient open the email knowing that they cannot confirm its authenticity due to the sender's office being closed for the holiday.
Please see the attached file. Thanksgiving Holiday: Closed November 28th & 29th; Christmas Holiday: Closed December 23rd - December 27th; New Years: Closed December 31 - January ..
Support the originator by clicking the read the rest link below.
