{"id":47069,"date":"2022-06-10T07:57:06","date_gmt":"2022-06-10T07:57:06","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/emotet-malware-gang-re-emerges-with-chrome-based-credit-card-heistware\/"},"modified":"2022-06-10T07:57:06","modified_gmt":"2022-06-10T07:57:06","slug":"emotet-malware-gang-re-emerges-with-chrome-based-credit-card-heistware","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/emotet-malware-gang-re-emerges-with-chrome-based-credit-card-heistware\/","title":{"rendered":"Emotet malware gang re-emerges with Chrome-based credit card heistware"},"content":{"rendered":"

The criminals behind the Emotet botnet \u2013 which rose to fame as a banking trojan before evolving into spamming and malware delivery \u2013 are now using it to target credit card information stored in the Chrome web browser.<\/p>\n

Once the data \u2013 including the user’s name, the card’s numbers and expiration information \u2013 is exfiltrated, the malware will send it to command-and-control (C2) servers that are different than the one that the card stealer module uses, according to researchers with cybersecurity vendor Proofpoint’s Threat Insight team.<\/p>\n

The new card information module is the latest illustration of Emotet’s Lazarus-like return<\/a>. It’s been more than a year since Europol and law enforcement from countries including the United States, the UK and Ukraine tore down the Emotet actors’ infrastructure in January 2021 and \u2013 they hoped \u2013 put the malware threat to rest.<\/p>\n