Trusted Design

Tale of the Two Payloads – TrickBot and Nitol

概要

A couple of weeks ago, we observed the Necurs botnet distributing a new malware spam campaign with a payload combo that includes Trickbot and Nitol. Trickbot is a banking trojan that first appeared late last year targeting banks in Europe, UK, Australia and other countries. This trojan injects malicious code into a web browser process and siphons sensitive data when the victim visits a target banking website. The Nitol family is well-known for its distributed denial of service (DDOS) and backdoor capabilities.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• US Banks Targeted with Trickbot Trojan - FlashPoint (score: 0.81)
• TrickBot Is Hand-Picking Private Banks (score: 0.71)
• Dumping Core: Analytical Findings on Trojan.Corebot (score: 0.70)
• Blurring of Commodity and Targeted Attack Malware (score: 0.69)
• BankBot Found on Google Play and Targets Ten New UAE Banking Apps (score: 0.69)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る