doifeellucky's twitter Feed : 2019/03/06 02:57:04

@SophosLabs
Several of our researchers track various aspects of the #Emotet killchain, plugins, and payloads. The infection process can be boiled down to “run several obfuscated command lines until it invokes a PowerShell command that downloads an Emotet executable.”

https://news.sophos.com/en-us/2019/03/05/emotet-101-stage-2-the-malicious-attachment-and-killchain/?cmp=30728

doifeellucky

^{Posted from Twitter via Share2Steem}