The TrickBot ransomware group, which also created BazarLoader and the Conti ransomware, has just upped its distribution tactics to become more of a threat. The cybercriminals behind the TrickBot Trojan have signed two additional distribution affiliates, named Hive0106 and Hive 0107 by IBM X-Force. The result of this move is

Alla Witte, a 55-year-old Latvian woman, has been charged with multiple counts for her alleged role in developing malware for the notorious Trickbot group. Witte has been charged with 19 counts of a 47-count indictment. Witte was arrested in February in Miami. Trickbot initially started several years ago as a

The Cybersecurity and Infrastructure Security Agency (CISA) and FBI have warned of an uptick in attacks deploying the TrickBot malware, largely utilizing phishing campaigns as the initial infection vector. The two entities released a joint advisory to the public on Wednesday, alerting individuals of the sophisticated attacks. According to the

TrickBot is now the top threat according to Check Point’s new risk assessment index, replacing Emotet after a law enforcement takedown on the Emotet ransomware operators. TrickBot also recently launched and conducted a massive spam campaign that targeted several different organizations. Check Point published a recent list titled most popular

Over the past few months, the cybersecurity industry’s most notorious tool, TrickBot, has also become its most potent enemy. Despite takedown attempts by Microsoft and the US Cyber Command, the tool has been developed even further, with its operators implementing a new technique that infects machines beyond operating systems and

Several security firms, including ESET, Black Lotus Labs, and Symantec have teamed up with Microsoft and the financial services industry to combat the use of Trickbot through eliminating the ransomware’s C2 infrastructure. The notorious Trickbot ransomware has infected more than a million computing devices to date, according to a statement

Yesterday, newly published nalysis from the security firm Intel 471 uncovered links between North Korea’s Lazarus Group and Russian-speaking cybercriminals. The report pinpoints links between the two organizations through examining years of security incidents. The conclusion, however, depends on two popular and generally accepted assumptions: that the Trickbot, TA505, and

The notorious TrickBot trojan has evolved again, this time acquiring the ability to check the screen resolutions of victims to detect whether the malware is running on a virtual machine or on the actual device. Researchers typically analyze malware while running a virtual machine that is outfitted with different analysis

A new phishing email campaign that prompts users to vote anonymously about the Black Lives Matter movement is secretly spreading the information-stealing malware TrickBot. TrickBot was initially created as a banking Trojan but has since evolved to perform other malicious tasks such as spreading laterally through a network, stealing saved

IBM X-Force recently disclosed that malicious actors are spreading the TrickBot trojan through fake messages that are COVID-19 themes. The new campaign capitalizes on public concern and interest in the Department of Labor’s Family and Medical Leave Act (FMLA). IBM X-Force stated that they uncovered the campaign after the analysis