Trojan.TrickBot – Computer Security Articles

New Emotet delivery method spotted during downward detection trend

October 28, 2020 admin Botnet, Edward Snowden, emotet, Malwarebytes news, Microsoft Office, Microsoft Word, ransom.ryuk, ryuk, Ryuk Ransomware, trickbot, Trojan, trojan.emotet, Trojan.TrickBot

Credit to Author: David Ruiz| Date: Wed, 28 Oct 2020 21:29:47 +0000

Emotet got a superficial facelift this week, hiding itself within a fake request asking users to update Microsoft Word to take advantage of new features.

Categories:

Malwarebytes news

Tags: botnet Edward Snowden emotet Microsoft Office microsoft word Ransom.Ryuk ryuk Ryuk ransomware trickbot trojan trojan.emotet Trojan.TrickBot

MalwareBytes Security

Tampa Bay Times hit with Ryuk ransomware attack

January 24, 2020 admin chicago tribune, CrowdStrike, dch health system, emotet, imperial county, imperial county california, lake city, lake city florida, Los Angeles Times, ProPublica, ransom, ransom.ryuk, ransomware, ryuk, Ryuk Ransomware, tampa bay times, tribune publishing, trickbot, Trojan.TrickBot, us coast guard

Credit to Author: David Ruiz| Date: Fri, 24 Jan 2020 20:11:10 +0000

Florida newspaper The Tampa Bay Times suffered a Ryuk ransomware attack Thursday, making it the latest major victim of the notorious ransomware family that continues to rise in popularity.

Categories:

Ransomware

Tags: Chicago Tribune CrowdStrike DCH Health System emotet Imperial County Imperial County California Lake City Lake City Florida Los Angeles Times ProPublica ransom Ransom.Ryuk ransomware ryuk Ryuk ransomware Tampa Bay Times tribune publishing trickbot Trojan.TrickBot US Coast Guard

(Read more…)

The post Tampa Bay Times hit with Ryuk ransomware attack appeared first on Malwarebytes Labs.

MalwareBytes Security

TrickBot adds new trick to its arsenal: tampering with trusted texts

September 3, 2019 admin 2fa, account takeover fraud, ATO, Authy, C&C, Dell Secureworks, dynamic webinject, dyreza, emotet, Eternal Romance, EternalBlue, EternalChampion, Gold Blackburn, Google Authenticator, hasherezade, point-of-sale, port-out fraud, pos, SIM hijacking, SIM swapping, Sprint, T-Mobile, thetrick, trickbot, trickloader, trickster, Trojan.TrickBot, trojans, two-factor authentication, Verizon Wireless

Credit to Author: Jovi Umawing| Date: Tue, 03 Sep 2019 15:26:01 +0000

TrickBot’s latest feature allows it to tamper with the web sessions of users from Verizon, T-Mobile, and Sprint mobile carriers.

Categories:

Trojans

Tags: 2fa account takeover fraud ATO Authy C&C Dell Secureworks dynamic webinject dyreza emotet Eternal Romance EternalBlue EternalChampion Gold Blackburn Google Authenticator hasherezade point-of-sale port-out fraud POS SIM hijacking SIM swapping Sprint T-Mobile thetrick trickbot trickloader trickster Trojan.TrickBot two-factor authentication Verizon Wireless

MalwareBytes Security

Sophisticated threats plague ailing healthcare industry

April 30, 2019 admin 2019 data security incident response report, cybercrime, decatur county general hospital breach, EternalBlue, filess malware, healthcare, healthcare cybersecurity, healthcare malware, Healthcare security, hipaa, malware, Ransom.WannaCrypt, ransomware, riskware, riskware.mictray, riskware.tool.hck, rootkit.fileless.mtgen, spyware, spyware.agent, spyware.emotet, spyware.trickbot, trickbot, trojan.bitcoinminer, trojan.emotet, trojan.fakems, Trojan.TrickBot, trojans, WannaCry, worm.parite, worm.qakbot, worms

Credit to Author: Jovi Umawing| Date: Tue, 30 Apr 2019 15:00:00 +0000

Black hat hackers are after patient healthcare data, and such breaches will only intensify. Which forms of malware are behind the attacks? We take a look at the advanced threats targeting a sector struggling to keep up.

Categories:

Tags: 2019 data security incident response report decatur county general hospital breach EternalBlue filess malware healthcare healthcare cybersecurity healthcare malware healthcare security HIPAA Ransom.WannaCrypt ransomware riskware riskware.mictray riskware.tool.hck rootkit.fileless.mtgen spyware spyware.agent spyware.emotet spyware.trickbot trickbot trojan.bitcoinminer trojan.emotet trojan.fakems Trojan.TrickBot Trojans WannaCry worm.parite worm.qakbot worms

MalwareBytes Security

What’s new in TrickBot? Deobfuscating elements

November 12, 2018 admin BotKey, gandcrab, gandcrab ransomware, IFL plugin, Malwarebytes news, pkcs11.txt, Powershell, profiles.ini, SecurityPreloadState.txt, svchost, svchost.exe, trickbot, trickbot_config_decoder.py, Trojan.TrickBot, XOR layer

Credit to Author: hasherezade| Date: Mon, 12 Nov 2018 15:00:22 +0000

Trojan.TrickBot has been present in the threat landscape from quite a while. We wrote about its first version in October 2016. From the beginning, it was a well organized modular malware, written by developers with mature skills. It is often called a banker, however its modular structure allows to freely add new functionalities without modifying…

Categories:

Malwarebytes news

Tags: BotKey gandcrab gandcrab ransomware IFL plugin pkcs11.txt powershell profiles.ini SecurityPreloadState.txt svchost svchost.exe trickbot trickbot_config_decoder.py Trojan.TrickBot XOR layer

(Read more…)

The post What’s new in TrickBot? Deobfuscating elements appeared first on Malwarebytes Labs.