Botnet Operators Team Up To Leverage IcedID, Trickbot Trojans

Minimalist · May 31, 2018

The botnet operators behind two infamous banking trojans have banded together to gouge victims of cash in a tricky collaborative scheme.

Flashpoint analysts, who highlighted the collaboration in a Wednesday report, said that the operators behind the IcedID and TrickBot trojans appear to be targeting banking victims in a dual threat — and sharing the profit.
Click to expand...

https://threatpost.com/botnet-operators-team-up-to-leverage-icedid-trickbot-trojans

itman · Jul 1, 2018

#1219797: MORE TRICKBOT MOVING FROM CLIENT (GTAG: SER0629) TO DC (GTAG: LIB257)

NOTES:

For more info, see the 2018-06-29 post by My Online Security titled: Even more Fake Santander Bank invoices delivering Trickbot
So far this week, I haven't noticed any method of persistence for Trickbot infections on a Windows client.

Prior to this, I always found a scheduled task to keep Trickbot persistent on the infected Windows client, but I haven't seen it during my infections this week.
However, I still see a scheduled task on the Active Directory (AD) Domain Controller (DC), after it gets infected over SMB.

Today's infection had no traffic from the infected Domain Controller to 188.124.167.132 over TCP port 8082 (something I've seen in recent Domain Controller infections).
Click to expand...

https://brica.de/alerts/alert/publi...g-from-client-gtag-ser0629-to-dc-gtag-lib257/

Minimalist · Oct 2, 2018

World Cup may have distracted malware hackers

This holiday season, together with the 2018 World Cup that took place in Russia, may have lulled hackers, cyber security researchers are claiming.

New research from Cofense says that the distribution of TrickBot saw a significant drop during the World Cup.

TrickBot is a banking malware known by constantly being updated and transformed. From April, up until June, it saw sustained and increasing attacks. However, as the end of July approached, TrickBot’s phishing lures became ‘incredibly simplistic’.
Click to expand...

https://www.itproportal.com/news/world-cup-may-have-distracted-malware-hackers/

Log in or Sign up

Botnet Operators Team Up To Leverage IcedID, Trickbot Trojans

Minimalist Registered Member

itman Registered Member

Minimalist Registered Member

Log in or Sign up

Botnet Operators Team Up To Leverage IcedID, Trickbot Trojans

Minimalist Registered Member

itman Registered Member

Minimalist Registered Member

Useful Searches