June 2, 2020

Trickbot Using BazarBackdoor to Gain Full Access to Targeted Networks

2 min read - Security researchers observed the Trickbot operators using a new backdoor called "BazarBackdoor" to gain full access to targeted networks.

June 1, 2020

Trickbot Replaces ‘Mworm’ Propagation Method With New ‘Nworm’ Module

2 min read - Security researchers discovered that the Trickbot Trojan has replaced its "mworm" propagation method with a new "nworm" module.

May 4, 2020

Weekly Security News Roundup: Shade Ransomware Authors Release 750K Decryption Keys

3 min read - The authors of Shade ransomware announced that they were releasing 750,000 decryption keys to help victims recover their files for free. Learn what else happened last week in security news.

Malware April 30, 2020

TrickBot Campaigns Targeting Users via Department of Labor FMLA Spam

4 min read - Recent analysis from IBM X-Force spam traps uncovered a new Trickbot campaign that currently targets email recipients with fake messages purporting to come from the U.S. Department of Labor.

April 13, 2020

Weekly Security News Roundup: Dark_Nexus Vies for Supremacy on Compromised Machines

3 min read - A new IoT botnet called "dark_nexus" drew researchers' attention to its efforts to establish and maintain dominance on a compromised machine. Learn what else happened last week in security news.

Advanced Threats April 7, 2020

ITG08 (aka FIN6) Partners With TrickBot Gang, Uses Anchor Framework

6 min read - Financially motivated, adaptable, sophisticated and persistent, the ITG08 threat group is likely to remain one of the most potent cybercriminal groups in this new decade.

March 30, 2020

Weekly Security News Roundup: 24 Children’s Gaming Apps Laden With Tekya Clicker

2 min read - Researchers found a new clicker malware called "Tekya" hidden within 24 children's games on the Google Play store. Read on to learn what else happened last week in security news.

Advanced Threats March 24, 2020

TrickBot Pushing a 2FA Bypass App to Bank Customers in Germany

13 min read - Our team is closely monitoring TrickBot's developing capabilities, including its new cross-channel attacks using the TrickMo component.

Malware February 19, 2020

Emotet SMiShing Uses Fake Bank Domains in Targeted Attacks, Payloads Hint at TrickBot Connection

3 min read - Before a short lull in mid-February, Emotet was in the midst of a rise in activity that has been apparent since late 2019 — in terms of both spam and infecting potential victims via SMiShing attacks.

Malware February 18, 2020

Banking Trojans and Ransomware — A Treacherous Matrimony Bound to Get Worse

6 min read - To combat the threat of banking Trojans and ransomware, organizations should stay up to date with the rapidly evolving threat landscape by utilizing the latest threat intelligence.