After awakening last week and starting to send spam worldwide, Emotet is now once again installing the TrickBot trojan on infected Windows computers.
On July 17th, 2020, after over five months of inactivity, the Emotet Trojan woke up and started massive spam campaigns pretending to be payment reports, invoices, shipping information, and employment opportunities.
These spam emails contain malicious documents that will install the Emotet trojan on the recipient’s computer when opened and macros enabled.
Historically, once a user became infected with Emotet, the trojan would eventually download and install the TrickBot trojan on the infected computer.
Source: Bleeping Computer