TrickBot’s New Spearphishing Tricks

Threat Watch

Threat Watch TrickBot’s New Spearphishing Tricks

TrickBot’s New Spearphishing Tricks

Recently, TrickBot has developed a new, fairly successful lure that poses as a sexual harassment claim filed against their targets. Using information gathered through research of publicly available information about the target, the TrickBot threat actors can make these lures look very legitimate, which makes avoidance difficult. Additionally, the downloaded Microsoft Installer (.msi) file allows the malware to maintain very little detection rates.

ANALYST NOTES

Always make sure that any document received through email is legitimate. Many anti-virus solutions allow users to individually scan documents and files. If in doubt, opening the file in a VM or on a non-production computer may be best. Additionally, disabling macros from untrusted sources are another good way to stay protected.

Source: https://www.malcrawler.com/awesome-spear-phish-techniques-from-those-tricky-tricksters-from-trickbot/

5 Critical Criteria for evaluating Managed Detection & Response (MDR)

Using Microsoft Sentinel to Detect Confluence CVE-2022-26134 Exploitation

Russia may be Pressing Arrested Cyber Criminals into Service

How Ransomware Capabilities Are Evolving and What You Can Do to Keep Your Organization Secure

Threat Watch