Trusted Design

Signed Dridex Campaign

概要

Malware authors use various means to make their malware look similar to legitimate software. One such approach involves signing a malware sample with a digital certificate. Recently we saw Dridex malware authors using this technique while reviewing the samples in our Cloud Sandbox. Dridex is a banking Trojan which typically arrives to a system via malicious spam email with a Microsoft Office file as an attachment. These files will have embedded macros that lead to the download and installation of the Dridex Trojan. Dridex then attempts to steal the victim's banking credentials and system information.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• New Dridex infection vector identified (score: 0.79)
• Drixed / Dridex - Sophisticated Banking Malware (score: 0.77)
• Banking Malware Dridex Arrives via Phishing Email (score: 0.73)
• Banking Trojan DRIDEX (score: 0.70)
• Dridex actors distributing the Shifu banking Trojan (score: 0.70)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る