Trusted Design

TrickBot comes with new tricks - attacking Outlook and browsing data

概要

In addition, it has been found, that developers added to the bot a worm module – probably inspired by the success of worm-equipped ransomware (WannaCry, EternalPetya). But authors of the malware didn’t stop on this – recently we captured some additions – for example, the one called Outlook.dll. While most of the modules are written in C++, this one is written in Delphi. It may indicate that the team of developers gained some new members that are more comfortable with this particular language.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Trickbot Banking Trojan's New WormShare Persistence Module (score: 0.65)
• Malware delivered via Necurs botnet by DDE feature in Microsoft Word (score: 0.64)
• A couple of months with Trickbots (score: 0.59)
• LatentBot Piece by Piece | Malwarebytes Labs (score: 0.59)
• Affiliate’s Malspam Operation: Kovter and Miuref/Boaxxe (score: 0.59)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る