Emotet back in action after short break

This Zscaler ThreatLabZ report analyzes the resurgence of the Emotet campaign after a two-month break, documenting new maldoc templates, three new RSA keys and reorganized C2/botnet infrastructure, the JavaScript downloader behavior, sample artifacts (MD5 and RSA key), embedded download URLs, and a long list of C2 IP:port indicators; it highlights Emotet’s modular role delivering additional threats (e.g., TrickBot, Ryuk) and provides IOCs to support network and endpoint detection.