Dridex Banking Malware Turns Up in Mexico

guest · Nov 11, 2021

Dridex Banking Malware Turns Up in Mexico
November 10, 2021
https://www.databreachtoday.com/dridex-banking-malware-turns-up-in-mexico-a-17879

Before cybercriminals shifted heavily into ransomware, there was banking malware: sophisticated programs designed to collect login credentials and intervene in transactions.

That type of malware, though less prominent than ransomware, is still lurking around. And researchers with Mexico-based Metabase Q, a cybersecurity services company, have seen a notorious type of banking malware known as Dridex recently appear in Mexico.
Click to expand...

Once a computer is infected, Dridex can capture login credentials, but that's just one of many features. It can detect when someone is logging onto a banking website and inject other malware or keylogging software.
It also has a link to ransomware.
Compromised Website
Metabase Q noticed three Dridex campaigns in Mexico starting in April of this year, writes José Zorrilla of Metabase Q's Offensive Security Team, Ocelot, in a blog post.
Click to expand...

Metabase Q: EvilCorp arrives to Mexico

Since April 2021, they have been compromising Mexican websites and then using them to distribute their preferred malware: Dridex, which has successfully stolen bank information from its victims since 2014.

To create greater awareness around these types of attacks in the region, Metabase Q and it is Offensive Security Team, Ocelot decided to publish the details of these campaigns in Mexico. We are focusing on three campaigns that started in April 2021. They all have the download of different malicious payloads from the compromised website of a Congresswoman.
Click to expand...

Log in or Sign up

Dridex Banking Malware Turns Up in Mexico

guest Guest

Log in or Sign up

Dridex Banking Malware Turns Up in Mexico

guest Guest

Useful Searches