The World's Most Dangerous Malware Is Back...
Vložit
- čas přidán 4. 08. 2024
- Hello guys and gals, it's me Mutahar again! This time we cover the resurgence of "Emotet", the malware from the last decade that was dubbed to be highly dangerous for it's means of infection and the ability to turn it into a service that allowed numerous groups to use it for unsavory reasons. It's back and alive and here's how you can keep your systems safe from it. Thanks for watching!
Like, Comment and Subscribe for more videos!
Use code "SOG" to save money at www.gfuel.com
Check out the newest episode of the podcast: • Elon Musk Is Buying Th... - Hry
![ILOVEYOU: Earth's Deadliest [Computer] Viruses](http://i.ytimg.com/vi/soZyb6lMx4c/mqdefault.jpg)
Use code "SOG" to save money at www.gfuel.com
Check out the newest episode of the podcast: czcams.com/video/aISZO0HwDZI/video.html
This comment will be deleted in 24 hours
i fell in love with an emo girl
@@itook75benadryls k
Gta iv is very cool
@@Mr.Miniguy I saw that "M"
My mom got hit by Emotet last year. They somehow managed to seamlessly recreate a work document and make it look like a colleague sent it to her. Luckily, she immediately noticed something was off as it said "enable makros" instead of "enable writing" and she got it fixed within a couple of hours. Still it's scary to what lengths some of them go through to infect people.
That doesn't seem like emotet. It could be targeted
your mother has some good perception
Wow omg
@Amazigh Girl Emotet does not target smartphones. They target enterprise users, as one of their goals is to move laterally and compromise the MS Exchange server on the user's network. After successfully webshelling the Exchange server, you'll see some more lateral movement before they move on to cobaltstrike, data exfil, and ransomware.
What if people aren’t creating viruses but they are like irl viruses where they occur naturally within the ecosystem of the internet.
ive been getting so many "receipt" emails lately, so this makes perfect sense.
wsup
It's the man
*_yeah mr boxhead man_*
MCNASTY!
Same here, over the past month I’ve had a strange flood of receipt and insurance emails go into my forums folder of my inbox. Don’t know why since I never had those emails before, but I luckily know they’re all scams since they all follow the same blueprint/format in each email.
Shut up
Just wrote an oral presentation and a 6 page presentation on the importance of security and protocol reforms my college needs to implement. 2 hours after I turned in the assignment yesterday my college was hit with ransomeware, lovely.
Humans, humans never change.
Would be surprising if you weren't blamed for that lol
I have never seen a PowerShell injection attack before. That's actually pretty cool and I learned something new today
Powershell is a pretty powerful tool. Who knows what will happen when a program is using powershell.
@@jordantdmu231 I use powershell all the time to automate tasks and create quick launchers for stuff. and yes, this can not only be done using links but any application which allows you to execute a command in a way.
@@jordantdmu231 powershell is only so dangerous because windows makes everyone the administrator by default. If everyone did it like how you do it on Linux and just elevated when needed, windows would be a lot more secure, still not nearly as much as Linux or BSD but a lot more than it is now.
@@supermasterfighter Windows hasn't been making anyone admin by default since Vista
the whole point of UAC is for permission elevation with the user's consent
Wait do I have to click a malicious email for a powershell attack to take place?
I'm glad I went into the IT security field.
Appropriately, it provides a lot of job security.
I'm just getting into IT getting my CompTia A+ right now and not regretting it after this video lol
Muta mentioned free virtual machines. Any recommendations?
@@misterhorse8327 virtual box, VMware, QEMU
@@excalligator5529 QEMU IS THE POO
Security in IT security 😂
Unlike the killer hornets in 2020, the deadly malware story arc is finally getting its conclusion
Don’t jinx it, *PLEASE*
I prefer Marble Hornets, but to each their own.. 😉
Emotet actually made its return in 2021. Video has its facts mixed up.
Well it looks like it's coming back now that u said it
Cyber hornets that give you the varus.
Here you go, got news for all of 2022
Thank me later CNN
I tend to get those "Amazon" emails that say you need to finalize the order, or you made an order and it's like a massive item like $5,000. It's like trying to get you to click the url or download the attachment because you would normally be concerned since you don't have the money for such an item or never bought that. I'm always skeptical, but when I get my dad's age and new ways of scams go around. It's going to happen, but as long as you know, you know.
Yeah thats the scary thing, us as young folks know the tricks(most at least)but we're gonna become those tech illiterate old folks one day and thats truly gonna be scary, ofc if you keep up with tech until an old age but how many are going to do that, we'll only see
@@dammitthatguy3107 that scares the shit out of me tbh. i don't wanna become some old ass dude who doesn't know anything about the world around me bc im perpetually stuck in the "good ol days" 😭
If you know,you know
My mom showed me she got that email and was wondering about it. I showed her where it was sent from and how other emails from Amazon look in comparison. I'm glade that they come to me whenever something SUS is going on.
It’s always best to check your credit card/bank account to see if that much money was spent
as someone who really isn't tech savvy I always appreciate Muda making these videos so I can learn and be more aware. Side note Muda looks like he lost some weight, please don't stress yourself too much man we worry about ya! Love the videos
I feel like everyday there's a new catastrophe in the cyber world.
@YeaMan paige
Fr
@YeaMan who is paige?
correction..'the world'
:/
It's not just a feeling, it's literally how this whole thing runs.
IT security specialists are on the lookout for new threats 24/7 but the are human, they can't find everything in time and the stuff they don't find ends up in huge fiascos.
Pretty shit job if you ask me and I'm pursuing it...
I've recently started going into a computer science degree that has a bit of cybersecurity classes and Muta's videos have been bangers for me lately. Love the channel dude.
Thanks
You too dude? It's crazy how much we learn from this guy for future programmers or cyber security
Not really Relevant but cute dog
Also watch mental outlaw
I think he works at cybersecurity
shush
My entire University was just hit with a giant ransomware attack, so all of the university's computers are compromised. It has affected the pos systems of every shop, restaurant, and security checkpoints. They have even had to cancel final exams for some classes.
This was in Texas right?
Wish my finals were cancelled.. 😩
@@_Kuma_ making sure you get more time before finals lo
They should've paid up
that shit was an inside job
Shortcuts bypass the PowerShell execution policy, which is what normally prevents untrusted or malicious scripts from running. It's such a dumb security flaw even a child could exploit it.
Interesting. Didn't know that. Because I was going to say.. how is that happening when you have to explicitly give permission to run scripts..
@@synergygaming65 I hope people don't just click "allow" absent-mindedly on some random "documents" but we would never know...
EMOTET even sounds like the name of an ancient evil entity that some jackass released one day.
emotits? BOOBA
Emotet? Sounds like that bald dude from the Mummy
THE XENO MORPHS ARE GOING TO INVADE THE UNIVERSE!! HELP US RN!!!!
Imhotep is the villain from one of the Mummy movies
@@DemonCore618 yes I remember lol 😂
Shoot me a link I’m gonna click it 100 times for science
The madlad himself is ready for another challenge
Proper madlad!!
Damn this is a missed comment love you homeless your my favourite r6 homeless pineapple playing player
Got a phishing email “from” my doctor’s clinic. Claimed to be an invoice and y’all they had me in the first half not gonna lie
Watch yourselves out there, gamers!
Thanks Moots for keeping us in the loops
i love this, Muta's channel turning more and more into educating people
Always has been 🔫
Tengku Aliff fax
He’s indian after all
@@makaveli4000 For me he's the final form of the guy who teaches you advanced options on your calculator in high school. Like, for every period of your life there s an Indian guy on YT who will sit down and teach you a ton
@@makaveli4000 I thought he was canadian. Just not white.
Muta you talk abour what not to do, but I'd love to hear how to check if you're already infected and don't even know it.
good idea !
Typically Malwarebytes is pretty on top of the various loaders. You can just download it and run it for free. But do remove it when done, as it's one of those programs that, even in trail mode, makes your computer dog slow.
@@andersjjensen yes, it’s because it takes up a lot of cpu and ram like windows defender because they’re constantly. scanning. for. viruses. i say it like that because it’s funny lol. someone give the antiviruses a break plz
@@andersjjensen Weird. I never see it running. But I also just right click and exit the "assistant" since it's pointless. If I need a program I run it. Until then it stays off, much like a lightbulb.
In fact, you know what. I'm going to use a program that checks for how much every .exe on my computer reads/writes. If by the end of a few days it hasn't done anything it should be fine, right?
@@flameshana9 Good idea, I say give it a shot!
There are two reasons why Windows will always be more susceptible to attack than Linux and MacOS:
1) Everyone not in a corporate domain environment runs administrator accounts.
2) Windows does not treat "executable" as a file system flag. If it's called ".exe" it's executable. On Linux/MacOS every file downloaded needs to be manually set executable by user intervention.
3) market share: being the most used OS automatically makes it the most targeted OS too. They really sink time into writing malware at times 😛
However, the easiest way to get into something is still through social engineering, meaning the OS is pretty much irrelevant.
@@MLWJ1993 I said "susceptible" not "worth while". Even if Windows lost market share down to 10% it would still be the *easiest* to attack.
And 1) and 2) are precisely why it IS so easy to execute social engineering attacks on Windows. To do the same on Linux you'd have to trick people into opening the property tab and clicking "executable" in the flags section... So no, the OS is not "pretty much irrelevant".
@@andersjjensen Windows is designed to be used by literal barnacles, so requiring that for executables to run on Windows would be pretty complex for most people, especially the elderly.
@@andersjjensen And there's absolutely no ways around that because a different OS is absolutely 100% secure... You'd be a moron to assume that... 😆
Thanks Muta, I love videos like these. Especially since I’m not too educated in anything desktop or computer-related. I know I’m many of your videos you have mentioned and even showed VMs. I was wondering if maybe you can dedicate a video on how to create one, or download one, how to use it, and how to delete it if it ever does get compromised like you mentioned in this video. That would be very helpful.
Been getting the same email named receipt the past like 3 days at the same exact time (3-4 am). Luckily, I know not to open these. But it kills me knowing there are people out there who just don’t know man. Everyone stay safe.
You mean the sexy honey who was messaging me at 1 am was not real???
Jokes on them, I don't even check my email!
@@jase276 same
Honest question: Is opening the email enough to put yourself at risk or do you have to click a link in the email?
@@selfishteammate Mostly the link, but if you see something SUS dont really bother opening it and just tag it as SPAM.
With something that is 3 kb and the shortcut having secret power shell code, there’s something about it that shouldn’t be tampered with
Been wanting to say this for a while, in my college they had an art gallery with a lot of art made by high schoolers. One actually made a portrait of SOG. the Piece came out really nice!
someone made a portrait of muta? that's actually really cool
@@nameofthename yea with the power of digital art, mutas face will live on for eternity
That’s awesome. SOG will go down in history as a legend for sure.
as someone who's now studying cybersecurity, I love when muta drops these vids - his excitement on the subject makes my day. it's honestly inspiring
DUDE! I think I almost got hit with one of these! I got a random email congratulating me on my motherhood and offering about $400 as a mother's day gift even when I'm male!
They just sent it 30 years too early
Congratulations on being a mother. You’re now on the next stage of life.
I get similar emails all the time
Congratulations!! Being a mother is a very special and beautiful experience.
Love your videos Muta, I never keep up with news and stuff because I just don't like the misinformation that goes around. But you keep everything real and while my friends just start hearing about a piece of information, I've known it for a few days from your vid
Muta, you're probably not gonna read this, but you have to look into the controversy surrounding Motorsport Games. I just started digging into it and at first I thought it was just a seemingly shady company that has been buying into the sim racing world, snatching a lot of licenses to various racing series and releasing a lot of mediocre products, but the rabbithole goes much deeper than that and it's fucking wild. We're talking investors suing for being lied to, stock market manipulation, broken game releases, financial collapses and ties to Russia. It was so wild to read about that I could barely sleep afterwards. It's too fascinating to pass up.
Fuck motorsport games, all my homies hate motorsport games
Signed by all sim racers ever
@@kevincorbat7084 fuck SIM games open world games rise up
Even doe he might not see this man this has me hooked imma look into it
these sort of videos are my favorite really takes me back to some of mutas older content . Miss his older darknet browses / virus breakdowns just that whole video style , 2016 type beat.
you're looking well rested and healthy, muta! happy to see bro
I was doing research for the MyDoom Virus back in 2004 for a high school Comps Sci project (Which you should totally check out btw), and got the inspiration to research it from these types of virus investigations. Props yo
Thank You for these types of videos Muta!!! As someone not super savvy person and someone who works with elderly and boomers often I’m so grateful to have a heads up on stuff like this to keep me and my buddies safe
This was a great video, very eye opening, I was not aware of all this until you told me today. Thank you!
From the thumbnail we can agree daddy Muta is excited. This brings joy to my eyes
2003 people watching this: oh no, *My Doom* is coming!
🤣👌🏼👈🏻
@YeaMan smc
What enrages me the most with this outbreak again is, that we apparently went backward in terms of virus awareness. I remember 10 years ago, it was second nature to check whether the suspicious file you download of the internet/got via email from unknown sources is actually the file it's supposed to be/expected to be. You don't expect a random "receipt" you got to be a .lnk.
And yes, I specifically mentioned, downloading shady things on the internet and downloading attachments from Emails you don't know are actually certifiably good, something you should never do in the first place.
My brother downloads cheats and mods online, i dont know if its because of a malware, but his phone doesnt work unless its plugged. He doesnt listen to me when I say that he shouldnt do it... Karma I guess?
@@danielestrada3390 thats a hardware issue though.
Still good to be careful!
Thank you heaps for educating people about these things.
I had absolutely zero idea that this even existed, and now I can protect myself from it.
Tysm 🌹💜
Fuck Malware, all my homies hate Malware
Facts
"We thought you were dead!"
Emotet: "My death was... Greatly exaggerated."
Excellent explanation and very good, common sense, advice regarding emails and programmes. I've seen a few of your videos and love the content. Just subscribed 👍
ALWAYS look forward to a new Mutahar video and getting educated!!
2:50 I literally had to make a history of malicious links for my computer science class. It was talking about how to avoid HEAT they have started to send the links through social media as they aren’t as suspicious of that. It was specifically about hackers targeting people working from home who’s security is much weaker then the companies they work for
Back in my edge boy days in 2010-12 made a dropper using the screensaver ext. and used power shell as a back up way of making sure the downloaded file ran it’s funny to see older type exploits reused after a bit of time that’s passed
My son-in-law gave me the best advice when it comes to email. He said that since my life doesn't revolve around email and I only set it up to manage other accounts, only open an email when I'm expecting it and never click an unknown link. I know this won't work for most people who depend on email for their jobs but it's great advice for someone who has a TBI or has other factors that make them vulnerable than those who grew up with this technology. Great video! Stay safe!
You broke it down real good. People so used to small programs to spread malware but may not understand how they are using links that are tiny in size but equally dangerous.
MUTA
Can you look into router RAM exploits that attack both users and the ISP's?
That's kinda the shady route these malware are being propagated from.
after watching this video and doing research, I can confirm that this is in fact malware.
Lmaooooo
It is one of the malwares of all time
Thank you so much for your hardwork, sir.
@@anthonyfernandez82 This malware is without a doubt.
This malware is the most malware ever
As always appreciate how well you explain things
I love your vibe, where have you been in my whole years of watching and creating content on CZcams
Why is the video so good.
It basically covers everything about security and vulnerability. At least the basics
We need to blow this video up. This information is super important to literally everyone nowadays!
Ty for showing a example code muta appreciate you!
Thank you for this information, I haven't been on my computer or email in years. I do like knowing how to be safe in an area I have honestly no knowledge about either. Thank you again.
I've had two PCs destroyed by some weird malware that causes your RAM to work exponentially harder until it destroys your PSU, and once my BIOS was destroyed beyond repair as well
simple reinstall of windows will get rid of malware like that i had it and reinstalled and my pc runs brand new no performance issues
@@Leafyyyy how do you reinstall windows
@@BuetifullPersun Typically you want to backup your files, then format the OS drive. By using windows install media (which is often a USB these days) you can boot the PC through that. The install setup copies the Windows files to your hard drive/SSD and you restart and boot to your main drive so you can use the install files. By booting like this the install assistant asks you for the configurations you want and the process begins.
@@ChucksSEADnDEAD u do not wanna save ANY files if u have a virus as that virus could be spreading to file to file if u back up and install windows ur just gonna be getting that virus all over again. it’s so much easier to do then the way ur explanation u go update and security, recovery in recovery u wanna do the reset pc and select the option to get RID of everything :) and boom pc fixed from virus (in most cases)
@@BuetifullPersun u go update and security, recovery in recovery u wanna do the reset pc and select the option to get RID of everything :) (get rid of all files as the virus could be spreading through ur pc) and boom pc fixed from virus (in most cases) it’s a good fix for performance issues but u will lose everything and have to re start simple factory reset of pc :)
Good luck with that one I never check my email till the point I can't physically get rid of them
appreciate that you are helping people out! now i know what i should look for in particular i the future
Great timely video muta. Thanks
This is why I just tell everyone to not open anything even if a friend links something I verify that they sent it
I've never heard of this Malware but I'm scared now.
Don't click links from things that say they're Amazon or other money spending places that you're not expecting, and don't go on shady sites, then you'll be fine. Like Muta says, if you get a receipt for something you don't know if you bought, don't open it
Relax dude just don't click any emails if you don't know who or where it's from
appreciate the awareness! these videos are a great introduction to the severity of cyber safety and online protection! i think you should create some sort of series on how to protect yourself and your data online! as well as essential rules or protocols to follow in order to keep yourself (personal data) and your pc safe👍👍
Thanks so much for this, greatly appreciated.
It's the gift that keeps giving, the joy in everyone's heart, lmao
No that's herpes your thinking of
Perhaps the most worrying part is at 5:58 - it implies that they managed to infect the website of a school in Spain (among other more inconspicuous targets) and use it as a remote control for the malware targets. Looks dangerously well coordinated to me!
Thanks for the heads up, Uncle Muta!
Looking good Muta! Your skin is glowing lately! :)
Tldr: Emotet is a trojan disguised as or hidden in an office file. DO NOT DOWNLOAD ANY OFFICE FILES ON THE INTERNET (EVEN IF THEY LOOK LEGIT)
If you download any Office file and it says "Enable Macros" Close it down immediately. Do not click ok. If you do it will infect your system.
If your system is infected you could try antivirus or if that doesn't work, contact an expert or reset the machine. Make sure to make backups! Keep a drive with backups of your files just in case!
They are spyware and can be used as a backdoor into your system.
Don’t you have to pull the plug on your internet router? So that it doesn’t jump to other drives or systems?
@@Vin_double_diesel that's a moot point now, as some virus now is going around specifically targeting router RAM chips. It converts some portion it from volatile (losing the info when power off) to persistent memory, meaning the virus continues to be saved in a ROM partition. And from there, well we get here.
@@apIthletIcc ah right
Are office files even a threat if they are viewed in Protected Mode(read-only)?
@@hellomine2849 The main issue are the macros, macros are EXTREMELY badly coded and vulnerable, 99% of viruses from office are just Macro related. tldr: NEVER enable macros, its not like anybody uses them anyways.
But MutaAaa
Keep doing your thing man. Big fan, Los Angeles is not that bad you have to know someone from out here. My family has been here for generations so hmu if you need a good tour. Love your work.
Great tips on how to avoid getting infected my viruses. I didn't know about Emotet or about creating a virtual machine to browse the internet.
Holy crap is that why I've been getting orders confirmation emails that I never placed? I guessed it was a scam and ignored it but this is much worse than a simple scam. Now I've clicked on the email tho I never downloaded nor have I visited a link of any kind but I feel bad for people who have.
Just make sure you look at who sent the email, 99% of these scams have super fishy emails
I know it isn't ment to be a meme, but it is a bit funny to hear Muta saying "VM Programs are free" for the thousand time. He's just begging ppl to use it and get off windows
Thank you for these!
Looking great Muta much love🖤
and it is great you know when you do all this and still get hacked or the companies gets hacked.
12:25 Beyond that, there is a decent chance they themselves might be hacked.
Thank you for looking out for all of us Mutahar! Much appreciated.
I have absolutely no idea what “Emotet” is, but since itʼs Muta, iʼll still watch it.
same
Same
I was 8 or 9 when that come out
@@MDGOLD same
Came here after a coffeezilla video and vibed with you. Thx for sharing
Always enjoy when Mutahar Uploads, actually entertaining!
I'm not a bot btw lol
@@LightoZtriker Sure, okay mr bot
@@trogon4503 you sure tho😂
@@angerypotato7430 you sure? 😂
A bot doesn't reply to it's self lmfao
@@LightoZtriker maybe not that, but I AM sure that it was a joke, good sir.
Love the educational vids Muta
Thanks for the heads up. 👍👍
The world needs to be secured by Blackberry. The most secure software on thr planet.
Question about this tho: Isn't PowerShell from standard on disabling 3rd party skript execution? As I know off, you first have to set PowerShell into another 'mode'. Would appericate it if someone could answer this.
Yes, but you aren’t running a 3rd party script here
It's not running a 3rd party script, it's executing the program with the command it's executing directly piped into the application arguments.
@@electrified0 Thank you!
I am a Fedora Linux user, but I always make sure I don't get redirected to some sketchy website or open fishy emails. Great video!
Great video. Love seeing these videos the low tier YT drama videos.
Even though I know it's BS I would love to see more Dark Web Adventures!
malware be lookin sus today
btw love your content muta, you've inspired me to pursue a career in tech
worst joke I have hearrd in a while, idk why i liked the comment
@@SSimon the sus never ends
@YeaMan the only heat coming from your page is burning rubbish
I’m incredibly shocked that we haven’t come up with something even slightly better than email at this point
It's efficient enough and easy enough to use that it's not dying off any time soon, any potential alternatives so far are either too hard for less tech literate people to learn/recall how to use, even less secure, or not as time/cost efficient a system sadly. You have to cater to the lowest common denominator with anything you want to be widely used, and email does that
Been a while since I saw mutahar you're looking great my guy keep it up
Lookin trim, nice work dude!
I wish this man taught my operating systems class
I wish I was taught an operating systems class. T - T
@@qwqk0xkx Not if you were in my class. My current prof is retiring and doesn't care very much about teaching. Sometimes I can't believe I paid for the class
@@qwertyman506 I had a prof like that. He was a replacement for the professor that left for another job. He didn't understand class content at all and could never answer a single question. He always deflected it with something stupid, and we were left to our own devices. He used online textbook provided materials and CZcams videos to "teach." Very effective!
@@qwqk0xkx tell him you can get infinite internet by connecting a antenna to a usb port by exposing the - data wire and using the matrix protocol
Muta looking real good in the thumbnail eh
Like his hair cut into the style of thumbnail he'd pull off real well
W vid as always, especially since I moved from mac to windows this week and don’t want to waste my new machine
Thanks for the heads up. I didn't hear of this Powershell trick until now. One more reason to be alert.
Was watching this and thinking that virus scans aren't perfect and shouldn't be trusted completely and that people should always run their browser and email client in sandboxie.
Good to see same conclusion was reached
I only have 8GB of ram so using a VM on the side while I do other stuff is not ideal, but I am pretty computer literate so I should be fine
Damn Muta, that a fresh trim? Looking good man 😎
I'm work in the domaining/parking page business and I can say first hand the number of sketchy websites that look like they had malware in them previously has exploded in the last month or so.
There’s a new browser in browser malware going around too, feigning Google 1 click sign in windows for example.
That one is fun. Some very creative CSS making it seem like a new browser window popped up... since it's fabricated, they can fake the secure padlock and the domain as well!
I would like to see a full series from Muta on computer stuff
Well done coverage. I used to be a car hacker for one of the big 3 and I can tell you it is definitely possible to download a car. Point of entry is that USB port connected to you infotainment unit. Then you just upload your stage 2 payload and call it a day.
I must add, many consumer devices have virtualization off in BIOS by default (it resets, too), and your host OS is going to give you errors that don't very well describe the issue when it fails. Once you google what you see, you get the answer right away. Yet, powershell is fully enabled and capable by default on non-enterprise computers. I think it is silly.
We love your videos Man!!
My question is does this apply to mobile devices? Most of my Emails are checked on mobile. I would assume they don't have any resources to Android system.
Can do if its coded for android, just depends on malware type
Android is just another operating system, like MacOS or Linux! And while Windows may be the most prominent target for malware, I bet Android OS would be a juicy target, especially with how many different vulnerabilities there may be. I feel like iPhones may be difficult to crack unless it's a day one exploit, but would also be very desirable. So I'd advise caution regardless.
@@qwqk0xkx thanks for the reply! I've had my suspicion that it was just as easy to get malware on phones.
@@qwqk0xkx Android is in fact based on GNU Linux, you can even run .tar .gz files if you tinker a bit with it.
@@jironamos7650 yeah I thought it was another unix-based OS, but didn't want to say cause I wasn't sure haha