March 2020’s Most Wanted Malware: Dridex Banking Trojan Ranks On Top Malware List For First Time

guest · Apr 10, 2020

March 2020’s Most Wanted Malware: Dridex Banking Trojan Ranks On Top Malware List For First Time
April 9, 2020
https://blog.checkpoint.com/2020/04...jan-ranks-on-top-malware-list-for-first-time/

Our latest Global Threat Index for March 2020 shows the well-known banking trojan Dridex, which first appeared in 2011, has entered the top ten malware list for the first time, as the third most prevalent malware in March. Dridex has been updated and is now being used in the early attack stages for downloading targeted ransomware, such as BitPaymer and DoppelPaymer.

The sharp increase in the use of Dridex was driven by several spam campaigns containing a malicious Excel file which downloads Dridex malware into the victim’s computer. This upsurge in Dridex malware highlights just how quickly cyber-criminals change the themes of their attacks to try and maximize infection rates.
Click to expand...

The March report also warns that “MVPower DVR Remote Code Execution” remained the most common exploited vulnerability, impacting 30% of organizations globally, closely followed by “PHP php-cgi Query String Parameter Code Execution” with a global impact of 29%, followed by “OpenSSL TLS DTLS Heartbeat Information Disclosure” impacting 27% of organizations worldwide.

Top malware families
This month XMRig remains in 1st place, impacting 5% of organizations globally, followed by Jsecoin and Dridex impacting 4% and 3% of organizations worldwide respectively. [...]
Click to expand...

Minimalist · May 27, 2020

Email scam aims to drop Dridex on machines by impersonating FedEx, UPS

As more Americans rely on package deliveries during the coronavirus pandemic, scammers are trying to capitalize on the tracking process by sending spoofed emails containing malicious software.
Click to expand...

https://www.cyberscoop.com/fedex-ups-dridex-email-scam-votiro/

guest · Jan 7, 2023

Dridex malware pops back up and turns its attention to macOS
By Jeff Burt @jburttech - January 6, 2023

A variant of the bad penny that is Dridex, the general-purpose malware that has been around for years, now has macOS platforms in its sights and a new way of delivering malicious macros via documents.
Click to expand...

The first sample of this latest variant appeared on Virus Total in 2019, but detections started to rise a year later and peaked in December 2022, according to threat researchers at Trend Micro.

However, while the Dridex variant has macOS systems in its sights, the malicious payload it delivers is a Microsoft exe file, which won't run in a MacOS environment.

"It is possible that the variant we analyzed is still in the testing stages and has not yet been fully converted to work in MacOS-based machines," Trend Micro threats analyst Armando Nathaniel Pedragoza writes in a report.
Click to expand...

However, Pedragoza noted that the variant overwrites document files that then carry Dridex's malicious macros, adding that "it's possible that the threat actors behind this variant will implement further modifications that will make it compatible with MacOS."

Dridex started off as a banking trojan targeting Windows systems and has over the years evolved to include information-stealing and botnet capabilities. It also has shown a lot of resilience.
According to Check Point researchers, Dridex is still most often used as a trojan against financial institutions – it was the fourth most prevalent malware variant in 2021, they wrote last year – but it continues to evolve, which has helped keep it relevant on the cyberthreat scene.
Click to expand...

Trend Micro: Dridex Returns, Targets MacOS Using New Entry Method

By: Armando Nathaniel Pedragoza - January 5, 2023
Normally, documents containing malicious macros enter a user’s system via email attachments posing as normal document files. However, while this might be the primary method of arrival, malicious actors have other ways of entering a victim’s system.

This blog entry primarily concerns Dridex, an online banking malware that has been active for years. The variant we analyzed has made its way into the MacOS platform and has adopted a new technique to deliver documents embedded with malicious macros to users without having to pretend to be invoices or other business-related files.
Click to expand...

Log in or Sign up

March 2020’s Most Wanted Malware: Dridex Banking Trojan Ranks On Top Malware List For First Time

guest Guest

Minimalist Registered Member

guest Guest

Log in or Sign up

March 2020’s Most Wanted Malware: Dridex Banking Trojan Ranks On Top Malware List For First Time

guest Guest

Minimalist Registered Member

guest Guest

Useful Searches