
Recently, an analysis of Emotet traffic has revealed that new samples use a different POST-infection traffic than previous versions. It is also attempting to use compromised connected devices as proxy command and control (C&C) servers that redirect to the real Emotet C&Cs.
The post Emotet Adds New Evasion Technique and Uses Connected Devices as Proxy C&C Servers appeared first on .