IT security: Instructions for the Emotet self-test Modified risk analysis Stake out the analysis area How the malware works An interim balance sheet Shared responsibilities – specific questions Result interpretation and conclusion Article in iX 2 / 2021 read Understanding why action is necessary is elementary when it comes to the Implementation of holistic IT security is possible. Knowing why your own organization is prone to Emotet infestation or not makes the security level more measurable and promotes understanding and acceptance of the resulting measures.

Emotet is current, relevant and dangerous. This not only shows the long history that this malware has since 2014 , but that is also proven by the many cases in the recent past – the Berlin Chamber of Commerce (September ), the University of Gießen and the city administrations of Frankfurt am Main and Bad Homburg (December 2019), various hospitals 2020 – and last but not least Heise in May 2019. The goals are varied and it is not uncommon for a complete breakdown of the IT infrastructure for days or weeks to occur.

Modified risk analysis Everything is at stake quickly if critical warning signals are ignored. Therefore, IT management, security and operations should jointly ask the following question: How susceptible is our organization to an Emotet infestation and which specific measures should we take to limit the potential for damage appropriately?

Access to all contents of heise + exclusive tests, advice & background: independent , critically founded c’t, iX, Technology Review, Mac & i, Make, c’t read photography directly in the browser register once – read on all devices – can be canceled monthly first month free, then monthly 9 , 95 € Weekly newsletter with personal reading recommendations from the editor-in-chief Start FREE month Start your FREE month now heise + already subscribed?

Sign in and read Register now and read the article immediately More information about heise +