Emotet Operators Use New Delivery Techniques Like OneDrive URLs and XLL Files

The activity occurred while Emotet was on a “spring break,” not conducting its typical high volume threat campaigns. The threat actor has since resumed its typical activity.