Recently, TrickBot has developed a new, fairly successful lure that poses as a sexual harassment claim filed against their targets. Using information gathered through research of publicly available information about the target, the TrickBot threat actors can make these lures look very legitimate, which makes avoidance difficult. Additionally, the downloaded Microsoft Installer (.msi) file allows the malware to maintain very little detection rates.
An Updated ServHelper Tunnel Variant
Binary Defense December 20, 2019
James Quinn, Threat Researcher for Binary Defense Executive Summary Binary Defense Researchers discovered active Command
