Linux warning: TrickBot malware is now infecting your systems

stapp · Jul 31, 2020

TrickBot's Anchor malware platform has been ported to infect Linux devices and compromise further high-impact and high-value targets using covert channels.
Click to expand...

According to Intezer, this embedded binary is a new light-weight TrickBot malware "with code connections to older TrickBot tools" and is used to infect Windows machines on the same network.
To infect Windows devices, Anchor_Linux will copying the embedded TrickBot malware to Windows hosts on the same network using SMB and $IPC.
When successfully copied to a Windows device, Anchor_Linux will configure it as a Windows service using the Service Control Manager Remote protocol and the SMB SVCCTL named pipe.
Click to expand...

https://www.bleepingcomputer.com/ne...ickbot-malware-is-now-infecting-your-systems/

Log in or Sign up

Linux warning: TrickBot malware is now infecting your systems

stapp Global Moderator

Log in or Sign up

Linux warning: TrickBot malware is now infecting your systems

stapp Global Moderator

Useful Searches