{"id":97852,"date":"2019-12-20T09:45:14","date_gmt":"2019-12-20T17:45:14","guid":{"rendered":"\/blogs\/?p=97852"},"modified":"2025-08-12T02:39:27","modified_gmt":"2025-08-12T09:39:27","slug":"christmas-emotet-trojan","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/internet-security\/christmas-emotet-trojan\/","title":{"rendered":"Don\u2019t RSVP to This Holiday Party: Protect Yourself From the Emotet Trojan"},"content":{"rendered":"

The holiday season is officially among us. From last-minute holiday shopping<\/a> to attending countless parties, this time of year keeps users busy. The holiday season is an especially busy time for cybercriminals as well. According to Bleeping Computer<\/a>, the cybercriminals behind the Emotet trojan<\/a> have been targeting users with a new spam campaign that impersonates a Christmas party invitation.<\/p>\n

How exactly have malicious actors been trying to put a damper on the holiday fun? They\u2019ve crafted phony invites that include a subject line like “Christmas party next week.\u201d Additionally, the invitation asks users to wear their ugliest Christmas sweaters and view an attached party menu. To further disguise this threat, the cybercriminals behind the attack have titled the attached documents “Christmas party.doc” or “Party menu.doc.” If a user opens one of these stealthy Word documents, they are prompted to ‘Enable Editing’ or ‘Enable Content’ to view it. However, if a user enables the content, the Emotet trojan will consequentially be installed. Once this is done, the victim\u2019s device can be used for more malicious attacks such as sending further spam emails, downloading the TrickBot banking trojan to steal user data, and even a ransomware stocking stuffer.<\/p>\n

Tips to protect your security:<\/h2>\n

So, what can users do to avoid this unwanted grinch from stealing their Christmas? Check out these tips to protect your security:<\/p>\n