{"id":15152,"date":"2020-02-26T16:57:35","date_gmt":"2020-02-26T21:57:35","guid":{"rendered":"https:\/\/www.firewalls.com\/blog\/?p=15152"},"modified":"2020-05-22T12:03:37","modified_gmt":"2020-05-22T17:03:37","slug":"emotet-malware","status":"publish","type":"post","link":"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/","title":{"rendered":"Emotet is back & badder than ever but Intercept X answers the call"},"content":{"rendered":"

Hardcore fans of the Firewalls.com Blog (yes, we\u2019re aware those don\u2019t exist)<\/em> may remember our Emotet malware article in March of last year<\/a>, painting the banking trojan as the cybersecurity world\u2019s biggest villain of 2019 and comparing him to the ever-evolving baddie, Ultron. With recovery costs surpassing a million dollars per incident, this feisty malware can wreak real havoc on small businesses and enterprises alike. A year has passed since that spotlight article<\/a>, but Emotet is far from being ancient history. In fact, recent trends suggest that the Emotet problem may grow worse in 2020.<\/p>\n

Security researchers at Nuspire<\/a> discovered a huge resurgence in Emotet malware activity throughout Q4 of 2019 including 1,275 unique variants of the malware with 339,000 new strains discovered each week. To support this growth, Emotet has been diligently adding new features to its toolset, allowing for greater versatility in stealing credentials, spreading infection, and pilfering user data.<\/p>\n

Same goal, new ways to reach them<\/h3>\n

We discuss a few of these new capabilities in Episode 13 of Ping: the Firewalls.com Podcast<\/a>, specifically focusing on Emotet\u2019s ability to scan wireless networks and infect connected devices. Added up with past strategies–spreading through email spam and lateral network movement–this advanced Trojan is proving ever more elusive to detect, identify, and prevent with every iteration.<\/p>\n

When Emotet malware made a sharp resurgence in September of 2019, it often paired up with Ryuk ransomware<\/a>, providing maximum damage to networks once attackers got their foot in the door. Cameos with TrickBot and BitPaymer also demonstrate that Emotet is willing to team up with fellow no-goodniks to cause even greater disaster after an infection.<\/p>\n

Best practices to prevent Emotet malware<\/h3>\n

When it comes to malware, the greatest cure is prevention. Educating users, securing unmanaged devices, and shining a light on network blind spots are all strong preventative measures that can prevent an Emotet outbreak on your network. Focusing on email security training and Business Email Compromise with your staff arms them with the knowledge needed to sidestep Emotet’s widespread spam campaigns.<\/p>\n

Sophos Intercept X Advanced with EDR<\/a> (and other machine learning-powered endpoint protection platforms) monitor the evolving behavior of malware strains such as Emotet, comparing threat data from security sensors worldwide to compile real-time threat data<\/a> to networks. Intercept X<\/a> offers multiple layers of security, including detonation of executable files in a secure sandbox environment.<\/p>\n

Strong email protection through XG Firewalls<\/a> provides additional strata of security, scanning outbound emails to detect Emotet spam, identifying which machines are responsible for it, and quarantining them from the network. Fighting off advanced threats such as Emotet requires multiple layers of security with end-to-end visibility and access control. Check out the Firewalls.com Services<\/a> section to learn how our team of certified network engineers can deploy Access Control Lists<\/a>, optimize your email security<\/a>, and monitor your network around the clock with Managed Security Services<\/a>.<\/p>\n

\"\"<\/p>\n","protected":false},"excerpt":{"rendered":"

Hardcore fans of the Firewalls.com Blog (yes, we\u2019re aware those don\u2019t exist) may remember our Emotet malware article in March of last year, painting the banking trojan as the cybersecurity world\u2019s biggest villain of 2019 and comparing him to the ever-evolving baddie, Ultron. With recovery costs surpassing a million dollars per incident, this feisty malware […]<\/p>\n","protected":false},"author":5,"featured_media":15155,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[285,68],"tags":[423,372,53],"acf":[],"yoast_head":"\nEmotet is back & badder than ever but Intercept X answers the call - Firewalls.com<\/title>\n<meta name=\"description\" content=\"Emotet malware made a big comeback at the end of 2019 & research suggests it could be even worse in 2020. Learn how to prevent Emotet on your network.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Emotet is back & badder than ever but Intercept X answers the call - Firewalls.com\" \/>\n<meta property=\"og:description\" content=\"Emotet malware made a big comeback at the end of 2019 & research suggests it could be even worse in 2020. Learn how to prevent Emotet on your network.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/\" \/>\n<meta property=\"og:site_name\" content=\"Firewalls.com\" \/>\n<meta property=\"article:publisher\" content=\"http:\/\/www.facebook.com\/firewallscom\" \/>\n<meta property=\"article:published_time\" content=\"2020-02-26T21:57:35+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-05-22T17:03:37+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/02\/Artboard-1-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Andrew Harmon\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@firewallscom\" \/>\n<meta name=\"twitter:site\" content=\"@firewallscom\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Andrew Harmon\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/\"},\"author\":{\"name\":\"Andrew Harmon\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/person\/8e89a2f96065af1717d00dfd06dca962\"},\"headline\":\"Emotet is back & badder than ever but Intercept X answers the call\",\"datePublished\":\"2020-02-26T21:57:35+00:00\",\"dateModified\":\"2020-05-22T17:03:37+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/\"},\"wordCount\":489,\"publisher\":{\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#organization\"},\"keywords\":[\"emotet\",\"intercept x\",\"Sophos\"],\"articleSection\":[\"Product Spotlights\",\"Weekly\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/\",\"url\":\"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/\",\"name\":\"Emotet is back & badder than ever but Intercept X answers the call - Firewalls.com\",\"isPartOf\":{\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#website\"},\"datePublished\":\"2020-02-26T21:57:35+00:00\",\"dateModified\":\"2020-05-22T17:03:37+00:00\",\"description\":\"Emotet malware made a big comeback at the end of 2019 & research suggests it could be even worse in 2020. Learn how to prevent Emotet on your network.\",\"breadcrumb\":{\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/dev01.firewalls.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Emotet is back & badder than ever but Intercept X answers the call\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#website\",\"url\":\"https:\/\/dev01.firewalls.com\/blog\/\",\"name\":\"Firewalls.com\",\"description\":\"Your Home For Cyber Security News, Stories, & Tutorials\",\"publisher\":{\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/dev01.firewalls.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#organization\",\"name\":\"Firewalls.com\",\"url\":\"https:\/\/dev01.firewalls.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.firewalls.com\/blog\/wp-content\/uploads\/2017\/08\/BrandedLogo-TagLineBelow.png\",\"contentUrl\":\"https:\/\/www.firewalls.com\/blog\/wp-content\/uploads\/2017\/08\/BrandedLogo-TagLineBelow.png\",\"width\":365,\"height\":85,\"caption\":\"Firewalls.com\"},\"image\":{\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/company-beta\/1439857\/\",\"https:\/\/www.youtube.com\/user\/firewallsDotCom\",\"http:\/\/www.facebook.com\/firewallscom\",\"https:\/\/twitter.com\/firewallscom\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/person\/8e89a2f96065af1717d00dfd06dca962\",\"name\":\"Andrew Harmon\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e5d2f09d4c27c62001c903fc1216429e?s=96&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e5d2f09d4c27c62001c903fc1216429e?s=96&r=g\",\"caption\":\"Andrew Harmon\"},\"description\":\"Andrew Harmon is the Director of Marketing for Firewalls.com, co-host of the Ping podcast, and engineer-to-English translator of the network security lexicon. Andrew focuses on creating content for small business owners and cybersecurity novices to make this crucial facet of modern business more approachable for non-experts everywhere.\",\"sameAs\":[\"https:\/\/www.Firewalls.com\",\"aharmon@firewalls.com\"],\"url\":\"https:\/\/dev01.firewalls.com\/blog\/author\/aharmon\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Emotet is back & badder than ever but Intercept X answers the call - Firewalls.com","description":"Emotet malware made a big comeback at the end of 2019 & research suggests it could be even worse in 2020. Learn how to prevent Emotet on your network.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/","og_locale":"en_US","og_type":"article","og_title":"Emotet is back & badder than ever but Intercept X answers the call - Firewalls.com","og_description":"Emotet malware made a big comeback at the end of 2019 & research suggests it could be even worse in 2020. Learn how to prevent Emotet on your network.","og_url":"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/","og_site_name":"Firewalls.com","article_publisher":"http:\/\/www.facebook.com\/firewallscom","article_published_time":"2020-02-26T21:57:35+00:00","article_modified_time":"2020-05-22T17:03:37+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/02\/Artboard-1-1.png","type":"image\/png"}],"author":"Andrew Harmon","twitter_card":"summary_large_image","twitter_creator":"@firewallscom","twitter_site":"@firewallscom","twitter_misc":{"Written by":"Andrew Harmon","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/#article","isPartOf":{"@id":"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/"},"author":{"name":"Andrew Harmon","@id":"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/person\/8e89a2f96065af1717d00dfd06dca962"},"headline":"Emotet is back & badder than ever but Intercept X answers the call","datePublished":"2020-02-26T21:57:35+00:00","dateModified":"2020-05-22T17:03:37+00:00","mainEntityOfPage":{"@id":"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/"},"wordCount":489,"publisher":{"@id":"https:\/\/dev01.firewalls.com\/blog\/#organization"},"keywords":["emotet","intercept x","Sophos"],"articleSection":["Product Spotlights","Weekly"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/","url":"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/","name":"Emotet is back & badder than ever but Intercept X answers the call - Firewalls.com","isPartOf":{"@id":"https:\/\/dev01.firewalls.com\/blog\/#website"},"datePublished":"2020-02-26T21:57:35+00:00","dateModified":"2020-05-22T17:03:37+00:00","description":"Emotet malware made a big comeback at the end of 2019 & research suggests it could be even worse in 2020. Learn how to prevent Emotet on your network.","breadcrumb":{"@id":"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/dev01.firewalls.com\/blog\/emotet-malware\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/dev01.firewalls.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Emotet is back & badder than ever but Intercept X answers the call"}]},{"@type":"WebSite","@id":"https:\/\/dev01.firewalls.com\/blog\/#website","url":"https:\/\/dev01.firewalls.com\/blog\/","name":"Firewalls.com","description":"Your Home For Cyber Security News, Stories, & Tutorials","publisher":{"@id":"https:\/\/dev01.firewalls.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/dev01.firewalls.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/dev01.firewalls.com\/blog\/#organization","name":"Firewalls.com","url":"https:\/\/dev01.firewalls.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.firewalls.com\/blog\/wp-content\/uploads\/2017\/08\/BrandedLogo-TagLineBelow.png","contentUrl":"https:\/\/www.firewalls.com\/blog\/wp-content\/uploads\/2017\/08\/BrandedLogo-TagLineBelow.png","width":365,"height":85,"caption":"Firewalls.com"},"image":{"@id":"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company-beta\/1439857\/","https:\/\/www.youtube.com\/user\/firewallsDotCom","http:\/\/www.facebook.com\/firewallscom","https:\/\/twitter.com\/firewallscom"]},{"@type":"Person","@id":"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/person\/8e89a2f96065af1717d00dfd06dca962","name":"Andrew Harmon","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e5d2f09d4c27c62001c903fc1216429e?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e5d2f09d4c27c62001c903fc1216429e?s=96&r=g","caption":"Andrew Harmon"},"description":"Andrew Harmon is the Director of Marketing for Firewalls.com, co-host of the Ping podcast, and engineer-to-English translator of the network security lexicon. Andrew focuses on creating content for small business owners and cybersecurity novices to make this crucial facet of modern business more approachable for non-experts everywhere.","sameAs":["https:\/\/www.Firewalls.com","aharmon@firewalls.com"],"url":"https:\/\/dev01.firewalls.com\/blog\/author\/aharmon\/"}]}},"_links":{"self":[{"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/posts\/15152"}],"collection":[{"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/comments?post=15152"}],"version-history":[{"count":10,"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/posts\/15152\/revisions"}],"predecessor-version":[{"id":15165,"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/posts\/15152\/revisions\/15165"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/media\/15155"}],"wp:attachment":[{"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/media?parent=15152"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/categories?post=15152"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/tags?post=15152"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}