{
	"id": "ae1891e7-f13e-4011-8035-59c375dd918f",
	"created_at": "2026-04-06T01:30:00.922276Z",
	"updated_at": "2026-04-10T13:11:28.484176Z",
	"deleted_at": null,
	"sha1_hash": "11d574009827e7cb59834403c49add808bb84693",
	"title": "Over 780,000 email accounts compromised by Emotet have been secured",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 84994,
	"plain_text": "Over 780,000 email accounts compromised by Emotet have been\r\nsecured\r\nBy Catalin Cimpanu\r\nPublished: 2022-12-13 · Archived: 2026-04-06 00:17:58 UTC\r\nMore than 780,000 email accounts compromised by the now-defunct Emotet malware gang have been re-secured\r\nby their respective owners, cybersecurity organization Spamhaus said last month.\r\nThe email accounts were compromised after users were tricked into infecting their computers with the\r\nEmotet malware.\r\nUsing automated scripts, the Emotet malware dumped passwords from browsers and email clients,\r\naccessed victims' email accounts, and hijacked old email threads by sending new messages to known\r\ncontacts containing malicious Office documents laced with malware in order to make new victims.\r\nWhen authorities seized and shut down the servers used by the Emotet gang in January 2021, they also\r\ngained access to the list of emails the criminal group had been using to spread their malware.\r\nThe list is believed to contain 4,324,770 email addresses, according to a copy the FBI provided to Troy\r\nHunt, the security researcher behind the Have I Been Pwned service.\r\nIn a blog post last month, Spamhaus said it also received a smaller list of 1.3 million email addresses\r\ncompromised by Emotet, from a law enforcement partner.\r\nSince mid-April, the organization had reached out to the companies and email service providers behind the\r\naddresses, asking them to re-secure accounts by resetting their passwords.\r\nIn total, Spamhaus said it reached out to 22,000 domain owners and 3,000 organizations to whom the\r\ncompromised 1.3 million email addresses belonged to.\r\nTwo months later, Spamhaus said that more than 60% of the 1.3 million addresses have now been re-secured.\r\nThis was a very important step because the owners of the Emotet malware are still at large, and access to\r\nthose email accounts could be sold to other criminal organizations or used by the Emotet gang if they\r\ndecide to come back.\r\nHowever, many other email accounts remain compromised. End users and companies can check if their\r\nemail addresses had been seen in Emotet email campaigns using the Have I Been Pwned service or\r\na special website created by Dutch police.\r\nGet more insights with the\r\nRecorded Future\r\nIntelligence Cloud.\r\nLearn more.\r\nhttps://therecord.media/over-780000-email-accounts-compromised-by-emotet-have-been-secured/\r\nPage 1 of 2\n\nNo previous article\r\nNo new articles\r\nCatalin Cimpanu\r\nis a cybersecurity reporter who previously worked at ZDNet and Bleeping Computer, where he became a well-known name in the industry for his constant scoops on new vulnerabilities, cyberattacks, and law enforcement\r\nactions against hackers.\r\nSource: https://therecord.media/over-780000-email-accounts-compromised-by-emotet-have-been-secured/\r\nhttps://therecord.media/over-780000-email-accounts-compromised-by-emotet-have-been-secured/\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://therecord.media/over-780000-email-accounts-compromised-by-emotet-have-been-secured/"
	],
	"report_names": [
		"over-780000-email-accounts-compromised-by-emotet-have-been-secured"
	],
	"threat_actors": [],
	"ts_created_at": 1775439000,
	"ts_updated_at": 1775826688,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/11d574009827e7cb59834403c49add808bb84693.pdf",
		"text": "https://archive.orkl.eu/11d574009827e7cb59834403c49add808bb84693.txt",
		"img": "https://archive.orkl.eu/11d574009827e7cb59834403c49add808bb84693.jpg"
	}
}