UNESCO Malware Attack: Destructive Campaign Spreads Online

Cyble researchers discovered Emotet-related clickbait links posted on UNESCO’s E-teams webpage that redirected visitors to malicious sites designed to harvest usernames, emails, and payment details. The report profiles Emotet as a modular, polymorphic banking trojan (downloader/dropper), enumerates extensive IOCs (domains, IPs, and hashes), and provides remediation recommendations such as updating AV, applying patches, and blocking the listed URL/IP indicators.