Recent spam campaigns from Emotet featured sextortion content very similar to emails previously sent by Necurs botnet. However, they ended up netting 10 times the amount that a comparable Necurs campaign did within a matter of six hours. IBM X-Force researchers have compared them with similar Necurs campaigns. The new campaigns do not end with the scam they continue to infect the victim with its payload. It is likely that this campaign tool is part of what emotet sells to other gangs, enabling them to use its infrastructure for cybercriminal activities.”]

