abuse.ch on Twitter: "#TrickBot (rob142) and #Emotet (epoch5) using the same malware distribution server 🕵️👀 mshta -> html -> PowerShell -> DLL 🔥 👉 https://t.co/aNpv2i9oKP TrickBot XLSM (rob142): 📄 https://t.co/a3b0gcfjPc Emotet XLSM (epoch5): 📄 https://t.co/sFcjCdU3xi https://t.co/UG8fJHkazg" / Twitter
https://twitter.com/abuse_ch/status/1468985961669443584