An increase in attacks by Emotet has been observed. Emotet uses Excel 4.0 macros to execute payloads on systems running Microsoft Office to gain access, steal data and perform other malicious acts.
These attacks usually appear in the form of an email with an attachment asking the user to open the file and take further action. Emotet is part of an attack chain that can lead to compromised credentials, exfiltrated data and ransomware attacks.
The latest patches ensure that Excel 4.0 macros are disabled by default.
Please see more info here from Microsoft and CISA on our FAQ
