Continuing threat from Emotet

The malware programme Emotet has spread rapidly in recent weeks via forged e-mails to private individuals, companies, authorities and also universities.

Emotet

Emotet - infection route Emotet - infection route Emotet - infection route
Emotet - infection route

This Trojan first reads contact relationships and emails from the mailboxes of infected systems and then sends infected emails to the contacts. The virus is particularly dangerous because it imitates the read-out messages in such a way that they are perceived as normal emails.

How you can protect yourself

  • Never click on attachments or links in e-mails without thinking, even if the sender is known. If in doubt, contact the sender personally.
  • Always keep your software programs (e.g. Microsoft Office) up to date.
  • Be careful not to execute macros in unknown documents, as the Trojans usually spread via malicious documents with activated macros.
  • If you have received infected e-mails, please do not open them! Contact the LUIS service desk.

Distribution

Prompt to activate macros - please ignore Prompt to activate macros - please ignore Prompt to activate macros - please ignore
Prompt to activate macros - please ignore

Emotet spreads via so-called active content in email attachments, e.g. in Office documents. When opening the corresponding attachment, the following message appears asking to activate macros. Please ignore this and close the document. Report to the LUIS service desk.

Contact

Hotline IT-Service-Desk
Office hours
The IT service desk is currently available by phone Monday to Friday 8:00 a.m. – 5:00 p.m.
Hotline IT-Service-Desk
Office hours
The IT service desk is currently available by phone Monday to Friday 8:00 a.m. – 5:00 p.m.