The insidious banking trojan Emotet steals personal information and has cost the government over $1 million to solve the issues it causes.

 

Cofense Lab Reports identified 660,000 email addresses and 385 web domains it’s targeted.

 

Like the Trojan horse of old, Emotet disguises itself as an urgent email to lure users, steal their personal information, and infect connected computers.

 

Read our guide to understand this reemerging threat and how to combat it.

What Is Emotet?

Emotet malware spreads primarily through infected emails. They contain attachments that look legitimate. If the user opens the file, the infection begins.

 

Emotet spreads quickly throughout computers in a network. It scans for connected devices and infects them with the Emotet virus and related malware programs.

 

Emotet is difficult to stop because it evolves, growing with time to avoid security measures placed against it.

How Do I Avoid Getting It?

One of the best ways to avoid getting infected by any malware virus is to evaluate every email.

 

There are certain questions users can ask before opening anything. Is it from a reputable source? Does it have attachments with strange file types? Does it ask for personal information?

 

Any email that meets these criteria is likely to contain harmful programs like Emotet malware.

Since the jEmotet virus spreads to other systems so quickly, it is also important for a business to secure their networks. Ensure that there are no unsecured devices and keep employees informed on how to protect themselves online.

 

Some prevention methods apply to both companies and individuals. Anyone who frequents the internet should download and update a reputable anti-virus program. They should also change all passwords if they believe malware may have entered their computer.

 

For more ways to keep data safe, read our five tips to prevent data breaches.

How Do I Know If I’m Infected?

Trojan horse viruses, like their namesake, are able to slip in unnoticed. The Emotet trojan is difficult to detect, and users can be infected without knowing it.

 

There are certain file names and types to look for that indicate the presence of an infection. Trojan Emotet files are typically found in the AppData/Local and AppData/Roaming directories and as randomly-named files in root directories. They resemble legitimate programs and go undetected by the computer, so users should delete any suspicious files in these areas.

 

An antivirus program can usually detect the presence of a malware virus, but Emotet grows more resistant to these prevention methods with time. An IT professional is the best line of defense.

What Should I Do If I’m Infected?

If a user thinks they may have Emotet malware on their computer, the best thing to do is to use an antivirus program or take the device to an IT professional.

 

There is a way to manually remove the infection. Download a program called autoruns, run it after restarting the computer in safe mode, find the infected file, and delete it.

 

If a company or large network gets infected, it’s important to find the source. Any computers with the Emotet virus must be isolated to keep the malware from reaching the rest of the system.

Need More IT Help?

Fighting a threat as insidious as Emotet is difficult without the help of a professional.

Learn about our managed IT services and contact us for more information today.