TrendLabs: EMOTET Spreading via Spam Botnet

Figure 2: EMOTET Infection Diagram for the recent wave of attacks

REF: http://blog.trendmicro.com/trendlabs-security-intelligence/emotet-returns-starts-spreading-via-spam-botnet/