• 'TrickBot' Trojan uses PowerShell to download exe

    Home » Forums » Cyber Security Information and Advisories » Code Red – Security/Privacy advisories » 'TrickBot' Trojan uses PowerShell to download exe

    Author
    Topic
    #129379

    New Trojan malware campaign sends users to fake banking site that looks just like the real thing
    Trickbot is now redirecting to a counterfeit site that displays the correct URL and the digital certificate of its genuine equivalent.

    By Danny Palmer | August 14, 2017

     
    A notorious banking Trojan is targeting customers of a major bank with a new email spam campaign, which directs victims to a fake login page that’s indistinguishable from that of their real bank.

    The credential-stealing Trickbot banking malware has been hitting the financial sector since last year and targets online banking customers in in the US, UK, Australia, and other countries.

    Those behind this particular banking Trojan are continually developing it and have even been experimenting with EternalBlue, the Windows exploit that helped spread WannaCry and Petya.

    But no matter how advanced malware gets, phishing remains a common attack vector for distributing malicious payloads.

     
    Read the full article here

    1 user thanked author for this post.
    Viewing 0 reply threads
    Author
    Replies
    Viewing 0 reply threads
    Reply To: 'TrickBot' Trojan uses PowerShell to download exe

    You can use BBCodes to format your content.
    Your account can't use all available BBCodes, they will be stripped before saving.

    Your information: