Emotet Takedown: Short-Term Celebration, Long-Term Concerns

Emotet Takedown: Short-Term Celebration, Long-Term Concerns
Security researchers examine how and when Emotet's operators may resurface, and the threats that could evolve in the meantime.

Emotet suffered a major setback nearly two weeks ago when an international law enforcement collaboration disrupted its infrastructure. But security researchers warn the malware and its operators may still prove to be a threat, and its takedown may give other attackers a chance to grow.


The takedown was no small task: Authorities including Europol, the FBI, and the UK's National Crime Agency, along with agencies from Canada, France, Germany, Lithuania, the Netherlands, and Ukraine, teamed up to bring down one of the world's most prolific and dangerous botnets.


As of December 2020, Emotet was the world's most popular malware, affecting 7% of organizations globally, Check Point research found. Its massive presence made it an appealing vector for attackers who wanted to deploy widespread malware and ransomware campaigns.


"Emotet, in a way, was by far the most successful botnet ever invented," says Lotem Finkelsteen, Check Point's head of threat intelligence. Several factors drove the botnet's growth: its tactics for infecting devices that enlarged its infection base; the attackers' ability to tailor phishing attacks to current events; and attackers' use of infected devices to send spam over a corporate network.


By the time law enforcement intervened, Emotet involved several hundred servers around the world. The botnet had infected more than 1.6 million machines and caused hundreds of millions of dollars in damage, the Department of Justice reported following its disruption.


Now, officials have gained control of Emotet ..

Support the originator by clicking the read the rest link below.