MS-ISAC Releases Security Primer on TrickBot Malware

ronjor · Mar 14, 2019

Original release date: March 14, 2019

The Multi-State Information Sharing and Analysis Center (MS-ISAC) has released a security primer on TrickBot malware. TrickBot is a modular banking Trojan that targets users’ financial information and acts as a dropper for other malware. An attacker can leverage TrickBot’s modules to steal banking information, conduct system and network reconnaissance, harvest credentials, and achieve network propagation.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review MS-ISAC’s White Paper: Security Primer – TrickBot for more information and best practice recommendations.
Click to expand...

guest · Mar 31, 2020

Trickbot: A primer
March 31, 2020
https://blog.talosintelligence.com/2020/03/trickbot-primer.html

EXECUTIVE SUMMARY

Trickbot remains one of the most sophisticated banking trojans in the landscape while constantly evolving.

Highly modular, Trickbot can adapt to different environments with the help of its various modules.

The group behind Trickbot has expanded their activities beyond credential theft into leasing malware to APT groups.

A successor to the Dyre trojan, Trickbot was originally designed to steal and exfiltrate sensitive information from a compromised host through stealing cookies from browsers or performing webinjects on banking or cryptocurrency trading sites. Over the years, Trickbot has not only expanded that functionality, but also added new features such as the ability to be used as a dropper for other malware. [...]
Click to expand...

Log in or Sign up

MS-ISAC Releases Security Primer on TrickBot Malware

ronjor Global Moderator

guest Guest

Log in or Sign up

MS-ISAC Releases Security Primer on TrickBot Malware

ronjor Global Moderator

guest Guest

Useful Searches