: They explain why the hackers used the .7z format (it has a higher compression ratio and was less scrutinized by legacy scanners). 💡 Why this file is "Interesting"
: Used "thread hijacking" (replying to old email chains). File Name : Followed the pattern [Month]_[Date]-[Year].7z . Lure : Contained a malicious .lnk or .vbs file inside. 📝 Recommended Blog Coverage APRIL_10-04-2022.7z
Both firms published blogs in early 2022 regarding the resurgence of . Unit 42 : Look for their research on Emotet's evolution . : They explain why the hackers used the